64%
Total Score
caution
A recent stable release and solid package structure are offset by zero recent commits, one maintainer, and very low repository activity.
Only one registry publishing maintainer is listed. Because the repository is user-owned rather than organization-backed, there is limited visible publishing redundancy.
The registry namespace and repository are owned by the same individual, confirming repository alignment but providing no organizational backing to compensate for the single-maintainer structure.
The package has five releases over about 31 months, with one release in the last 12 months and the latest released on February 23, 2026; this shows ongoing but slow maintenance.
There were zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance capacity remains uncertain.
The repository has one star and no forks, indicating very limited external adoption; popularity is only supporting evidence, but it reinforces the thin-project picture here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.0 | — | — |
psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
symfony/serializer Version ^5.0 || ^6.0 || ^7.0 | — | — |
league/oauth2-client Version ^2.0 | — | — |
symfony/property-access Version ^5.0 || ^6.0 || ^7.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.