Clear documentation, licensing, and release notes make integration straightforward. The workflow still needs tighter action pinning.
76%
Total Score
50
100
88
88
The registry namespace and repository are owned by the same individual account. This confirms ownership alignment, but it does not provide the continuity benefits of organization backing.
One contributor made 100% of the 130 recent commits. The project is user-owned rather than organization-owned, so there is no provided organizational backing to offset this concentration.
The repository recorded 130 commits in the last 3 months, showing strong recent activity. All activity comes from one active maintainer, so continuity depends heavily on that person.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of unsafe code by itself.
Version 0.9.0 is not a prerelease, and recent releases contain no prerelease versions. The pre-1.0 major version still signals some API-change risk, but it is partly offset by the stable release pattern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.