The package has a clear MIT license, a focused six-file artifact, and a matching organization-backed repository. It has no tests or security scanning, and the repository has seen no commits in over two years.
62%
Total Score
75
79
75
The latest release was published in March 2024, with no releases in the following 12 months; this indicates a maintained package may have gone quiet, though the release includes documented changes.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the roughly two-year gap since its last push and raising abandonment risk.
The repository has one star, four forks, and one watcher, indicating limited visible adoption. Popularity is only supporting evidence, so this modestly lowers confidence in project maturity rather than determining the verdict.
Composer is used for the build, which supports reproducible packaging, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. The organization-backed repository and published release notes provide some compensating transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.