The package includes a README, extensive tests, and a small runtime dependency surface. MIT licensing and no install-time scripts improve adoption confidence, but the repository identity and release metadata need checking.
62%
Total Score
50
100
71
75
Nine releases in 224 days shows ongoing publishing, but the median interval is about three hours, suggesting a bursty cadence that makes release quality harder to judge.
All four recent commits came from one contributor, leaving maintenance dependent on a single person.
Four commits were made in the last three months, showing recent activity, although the volume is modest for a maintained library.
The repository name does not match the package name and its README does not mention the registry package name, so package-to-repository ownership is less clear despite the repository being linked.
Composer is used for builds, but no security scanning tool was detected; the missing scanning is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.