Its small Composer source tree is straightforward, and installation has no lifecycle scripts. The lack of tests, a security policy, and a consumer README limits maintenance and integration confidence.
58%
Total Score
67
72
88
Only one registry account has publish access, leaving a thin publishing base; the linked repository is user-owned rather than organization-backed, so no compensating organizational backing is shown.
The package has no README or tests, which weakens consumer guidance and verification; however, release notes exist for this exact version and the missing changelog is normal for a published artifact.
The package has existed for about 3 years and has 13 releases, but only 2 releases in the last 12 months; the latest release is recent, so this indicates limited ongoing cadence rather than abandonment.
There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern even though the repository was pushed recently.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external maturity signal.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.