Repository tests, release notes, security policy, and organization backing provide useful project context. Pin v0.1.1 deliberately because development has been quiet and the package remains pre-1.0.
63%
Total Score
75
67
The package is 127 days old with only two releases, both published within hours on the same day. That is limited evidence of sustained release practice, though the project is still relatively new.
The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest maintenance concern. The repository is not archived and the project has organizational backing, but neither offsets the observed inactivity fully.
v0.1.1 is not a prerelease, but the major version is still 0, so API and behavior changes may remain likely as the project matures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^5.0 | — | — |
illuminate/process Version ^10.20|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.