The MIT license is present and installation has no lifecycle scripts. The small repository has no security policy, and its name does not match the package, weakening confidence in its maintenance and ownership.
42%
Total Score
50
71
75
The artifact has no README, which is a transparency and integration gap for a PHP library; the absence of tests and a changelog is normal packaging practice and is not penalized.
The repository is owned by a personal user account rather than an organization, so the single-contributor concentration is not visibly offset by broader project backing.
The package is only 23 days old and has a single release, so there is not enough history to demonstrate sustained maintenance or stability.
One contributor made 100% of the single recent commit, leaving maintenance dependent on one person with no demonstrated handoff capacity.
Only one commit was recorded in the last three months, all within this package's short 23-day history; this provides little evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.