Testing and release notes provide some confidence, and the organization-owned repository is not archived. Ongoing maintenance is unclear after no commits in about eight months, while the missing license and security policy reduce transparency.
58%
Total Score
75
64
50
No declared license, license file, or repository license file was detected, leaving the legal terms for adoption unclear.
The package includes tests and has release notes for this version, which support basic project discipline. It has no README, however, leaving consumers without package-level usage guidance.
The package has three releases, all within about nine hours, with no later release shown across its roughly nine-month lifetime. That suggests limited evidence of sustained release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have stalled. The recent release and January push provide only limited compensation.
The project uses Composer, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of a defect.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.