The package is small and focused, with clear usage examples and a minimal runtime dependency. Its repository has tests and the release is licensed, but workflow references are unpinned and security documentation is absent.
62%
Total Score
75
100
83
67
There has been only one release, published about 21 months ago, with no releases in the last 12 months. That may be intentional for a stable data package, but provides little evidence of ongoing maintenance.
The repository had no commits and no active maintainers in the last three months, consistent with the lack of a newer release and raising a maintenance concern.
The repository has zero stars and forks and one watcher. Low popularity is only supporting evidence, but it offers little external indication of adoption or review.
Composer build tooling is present, but no security scanning tool was detected. For this small package that is a modest transparency gap, not evidence of an unsafe release.
The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's small scope limits the significance of the gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.