Usable with caveats: this is a brand-new, pre-1.0 release with no track record yet. It has a matching organization-backed repository, documented tests and changelog, clear licensing, and safe workflow permissions, but maintenance history and security-scanning evidence are not yet established.
72%
Total Score
100
100
75
100
The package was released today and has only one release, so there is no demonstrated release track record yet; its zero-day age makes the absence of historical releases expected rather than evidence of abandonment.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone is not required for a small new package.
Composer build tooling is present, but no security-scanning tool was detected, leaving a security-process gap for a package intended for dependency use.
Version v0.3.0 is not on a stable major version, which signals an evolving API and greater compatibility risk for adopters.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.