The release is stable and backed by an organization with a current, unarchived repository. Its small audience and limited repository security tooling leave less independent evidence than a mature dependency.
78%
Total Score
100
100
83
83
The package has four releases over 585 days, with one release in the last 12 months and a median interval of about 76 days. This shows ongoing maintenance, though the cadence is modest.
The repository has zero stars, one fork, and two watchers. Popularity is only supporting evidence, but these low counts provide little external validation for the package.
The project uses Composer, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is not severe on its own.
No repository security policy was found, reducing clarity about vulnerability reporting and response practices.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
m2e/core Version ^1.7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.