It has a clear MIT license, a substantial README, repository tests, and recent commits. Dependencies are few and install scripts are absent.
68%
Total Score
60
100
100
67
Only one account has registry publishing access. This is consistent with the individual-owned repository, but it leaves publishing continuity dependent on one person.
The package and repository are owned by the same individual account rather than an organization. That matches the single-maintainer evidence but offers limited institutional continuity.
One contributor made all 13 commits in the last three months, giving the project a complete single-person commit concentration. Individual ownership does not provide the handoff protection of organization backing.
The repository recorded 13 commits in the last three months, showing recent work. All commits came from one active maintainer, which limits maintenance redundancy.
The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, although other security tooling provides partial compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.4 || ^7.0 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.