Usable with caveats: the package is actively released, tested, licensed, and has a matching repository, but it is a young release candidate maintained by one contributor with limited security and adoption signals.
67%
Total Score
63
100
83
75
The repository is owned by a personal user account rather than an organization, so the single-contributor and maintainer concentration findings are not offset by visible organizational backing.
One contributor made all six recent commits, leaving the project dependent on a single maintainer for ongoing fixes and releases.
There are no open issues or pull requests, and no recent issue or pull-request activity. For a young, small package this is neutral rather than evidence of abandonment, but it provides little independent maintenance evidence.
The repository has only two stars, one fork, and no watchers. Low popularity is supporting evidence rather than a verdict, but it offers little external validation for this young package.
Composer build tooling is present, but no security-scanning tools were detected, leaving security maintenance practices less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
macropay-solutions/php-kernel Version ^1.0.0 | — | — |
macropay-solutions/php-crufd-wizard Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.