This is a healthy, actively maintained release with a five-year history, 41 releases, 14 releases in the last 12 months, and a latest release published very recently. The package is licensed, has a matching source repository with tests and a complete source tree, uses no install-time lifecycle scripts, has only one runtime dependency, is not deprecated or archived, and has recent commit activity. The main concerns are that all 19 recent commits came from one contributor, the repository has no security scanning or security policy, and the project has no issue or pull-request activity; organizational ownership provides some maintenance continuity but does not eliminate the single-contributor risk. Overall, it appears suitable to depend on, with normal due diligence around maintenance continuity and security response.
82%
Total Score
70
100
83
90
Only one registry publishing account is listed, which is a modest publishing-continuity concern; the organization-owned repository provides some compensating project backing.
One contributor made all 19 commits in the last three months, creating a genuine concentration and continuity risk. Organization ownership partially compensates by allowing potential handoff, but no second active contributor is evidenced.
There are no open issues or pull requests and no activity in the last month. This does not show abandonment by itself, but it provides little evidence of an active user or review community.
The repository has zero stars and forks and one watcher, indicating limited external visibility; this is supporting evidence only and is outweighed by the strong release and commit activity.
Composer build tooling is present, but no security-scanning tools are detected. The missing scanning is a security-hygiene gap, though it is not evidence of maliciousness or abandonment.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.