Its focused package layout and clear installation notes make the intended use easy to understand. The project is still early-stage, with little visible activity and limited assurance tooling, so pinning this version is preferable for production use.
62%
Total Score
75
78
88
The package is about 274 days old with only two releases, although the median interval between them was about 20 days and both arrived within the last 12 months. This shows initial maintenance but limited maturity.
There were no commits and no active maintainers in the measured three-month period. With only two releases, this is a meaningful maintenance concern even though the latest release was relatively recent.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption lowers confidence in project maturity.
Composer build tooling is present, but no security scanning tools were detected. This is a hygiene limitation for a package intended to be installed as a dependency.
The repository has no security policy. That limits transparency about vulnerability reporting, though it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.