The package includes clear installation guidance, tests in the repository, and read-only workflow permissions. Organization ownership provides some continuity, but there is no security policy and the install hook deserves review.
64%
Total Score
83
75
50
The artifact includes an MIT license file, but the manifest declares the package proprietary; that mismatch creates licensing ambiguity for consumers.
A post-install command runs during installation. This may be intentional for package setup, but install-time execution adds operational review burden compared with a package without lifecycle scripts.
This is the first and only release, published today, so there is no release track record to demonstrate stability or sustained maintenance.
One contributor made all 18 recent commits, which concentrates maintenance risk. Organization ownership provides some ability to hand work off, so this is a concern rather than a severe standalone risk.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
limegreentangerine/class_kit Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.