The repository has active recent work, tests, security tooling, and clear documentation. Its short release history, 0.x version, and single active contributor leave limited evidence of long-term stability.
68%
Total Score
75
86
75
A post-install-cmd script runs during installation, creating an additional execution point that should be understood before adopting the package.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.
This package is only 51 days old and has one release, so there is little release history to demonstrate stability or sustained maintenance.
All 60 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited demonstrated handoff capacity.
Version 0.1.0 is an early non-stable-major release, which signals an API and maintenance track that may still change substantially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mcp/sdk Version ^0.6 | — | — |
typo3/cms-core Version ^13.4 || ^14.0 | — | — |
symfony/console Version ^7.0 || ^8.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
symfony/polyfill-php83 Version ^1.27 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.