The package has a detailed README, a small runtime dependency set, no install-time scripts, and matching repository ownership. MIT licensing, Composer tooling, security scanning, and a published security policy improve transparency, while the absence of tests limits confidence.
68%
Total Score
75
100
86
100
The registry namespace and repository owner match, providing consistent ownership context; the owner is an individual rather than an organization, so the maintainer base remains inherently limited.
The package is only 0 days old with three releases clustered within about 34 minutes, so there is not yet evidence of sustained maintenance or release stability.
v0.1.2 is not a stable major release, which signals an early API and compatibility stage; it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.