64%
Total Score
67
100
100
50
A post-create-project-cmd script runs during project creation, matching the package's documented create-project installation flow. This is expected behavior, though it warrants awareness when installing because it executes at setup time.
The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the package had three releases in the last year and the repository was recently pushed.
There was no new or closed issue activity in the last month, and one issue remains open. This is a modest sign of limited current project interaction, but it is not evidence of abandonment by itself.
No security policy was found in the repository. That leaves vulnerability-reporting and response expectations unclear, creating a transparency gap for a package that handles backups and credentials.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.0||^7.0||^8.0 | — | — |
symfony/process Version ^6.0||^7.0||^8.0 | — | — |
windwalker/data Version ^4.0 | — | — |
windwalker/http Version ^4.0 | — | — |
firebase/php-jwt Version ^5.0||^6.0||^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.