Publishes the Agent Skills discovery index at /.well-known/agent-skills/index.json with runtime-computed digests.
70%
Total Score
caution
Strong packaging and active development are offset by the package being less than a day old with a single active contributor.
The repository is owned by an individual user rather than an organization, so there is no shown organizational handoff capacity to offset the single-contributor concentration.
The package is less than one day old but already has 36 releases, with a median interval of zero days. This shows active publishing, but not yet a proven release history or stable cadence.
Only one contributor made all 19 commits in the last three months, leaving no demonstrated backup maintainer and increasing continuity risk.
Composer build tooling is present, but no security-scanning tool was detected. The repository's SECURITY.md provides some compensating transparency, so this is a minor gap rather than a severe concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.2.9 || ^2.3.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/routing Version ^7.4 || ^8.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
symfony/http-foundation Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.