It has a clear MIT license, repository tests, a security policy, and active recent development. The release stream is only 97 days old, every recent version is a prerelease, and all 237 recent commits come from one contributor.
64%
Total Score
63
50
78
83
The package declares 35 runtime dependencies, including several framework and extension requirements. This creates a broad compatibility surface, but the signal does not show an unsafe or abandoned dependency set.
The repository is owned by a user account rather than an organization, so the single-maintainer concentration is not visibly compensated by broader project backing.
The package is only 97 days old but has 166 releases, with a median interval of about 2.5 hours. This shows active publishing but also an unusually rapid, immature release stream.
One contributor made all 237 commits in the last 3 months, creating a severe continuity and handoff weakness. The repository owner is an individual account, so there is no organizational backing shown to offset that concentration.
The repository recorded 237 commits in the last 3 months, showing strong current activity. However, the activity is concentrated in one maintainer.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
ramsey/uuid Version ^4.7 | — | — |
symfony/mime Version ^7.4 | — | — |
nesbot/carbon Version ^3.11 | — | — |
psr/container Version ^1.1.1|^2.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.