The package has clear usage documentation, tests, no runtime dependencies, and a matching source repository. Its single-maintainer setup and unpinned workflow actions leave less margin for long-term upkeep.
64%
Total Score
50
100
88
67
Only one registry maintainer is listed, so publishing and ongoing stewardship depend on a single person. The matching user-owned repository provides direct backing but not contributor redundancy.
This is the only release since October 2023, with no releases in the last 12 months. That makes the maintenance history thin, although the linked repository was pushed recently.
There were no commits and no active maintainers in the three months measured. The January 2026 push shows some recent activity, but the current short-term inactivity still limits confidence in ongoing maintenance.
Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and upkeep gap for a dependency.
The repository has no security policy, leaving vulnerability reporting expectations undocumented. This is a hygiene concern rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.