This release appears usable but is very new, so its long-term maintenance and compatibility are not yet established. It has a clear MIT license, a substantial README and changelog, repository tests despite tests being absent from the artifact, reproducible-looking Composer-based tooling, Dependabot scanning, safe workflow analysis, and organization backing. However, only two releases exist within the same day, repository commit history has no activity recorded over the last three months, the repository has no security policy, and one workflow grants top-level write permissions. These are meaningful transparency and maintenance concerns, though the repository is not archived or deprecated and recent merged pull requests provide some evidence of active initial development.
68%
Total Score
83
100
83
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
symfony/mime Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/mailer Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/http-client Version ^6.4 || ^7.4 || ^8.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.