The release is well documented, tested, and backed by two equally active contributors in an organization. Its young, pre-1.0 history and unpinned workflow actions leave some compatibility and build-integrity risk.
78%
Total Score
100
100
78
83
The package is young at 162 days but has published 10 releases in the last 12 months, showing active iteration rather than abandonment. The unusually short median interval suggests rapid early development.
The repository has no stars, forks, or watchers, so there is little external adoption evidence. This is offset by recent commits, release activity, and organization backing.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest maintenance and vulnerability-detection gap.
The repository has no security policy, which makes reporting and handling vulnerabilities less transparent for a security-sensitive admin package.
v0.6.0 is not a stable major release, so compatibility may still change despite the absence of prerelease labeling.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
libxa/framework Version ^0.11.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.