Healthy and reasonable to adopt, with a clear repository, tests, documentation, and active recent development. It is still a young package with rapid releases, and the repository lacks a security policy and explicit workflow token permissions.
80%
Total Score
100
100
88
67
The package is young at 47 days old but already has 13 releases, with a median interval of about 6 hours. This shows active iteration but leaves limited evidence of long-term stability.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.
All three analyzed workflows lack top-level token permissions declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege configuration would improve build transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
liberusoftware/settings Version ^1.0 | — | — |
liberusoftware/module-manager Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.