It includes tests, a clear README, and regular stable releases. The workflows are fully audited but use four unpinned actions, and no security policy is present.
72%
Total Score
50
100
89
50
A post-autoload-dump script runs during installation. This is a normal Composer integration point, but it deserves awareness because it executes package-defined install-time behavior.
The repository is owned by a user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
All recent commits came from one contributor, leaving no demonstrated handoff capacity and increasing abandonment risk if that contributor stops.
There was one commit in the last three months, so the repository is still active, though the recent maintenance volume is light.
The repository has no stars or forks and one watcher. This provides little community evidence, but popularity is only supporting evidence and does not outweigh the active release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.