It has a clear README, integration tests, a matching repository, and an MIT license. The small dependency set and clean workflow audit help, but the available project history remains limited and its release tooling needs tightening.
58%
Total Score
50
100
78
75
This is the package's only release, published about 194 days ago, so there is little release history to demonstrate sustained maintenance.
There were zero commits and zero active maintainers in the last three months, leaving no recent evidence of fixes or ongoing maintenance.
The repository has only 2 stars, 1 fork, and no watchers. Popularity alone is not decisive, but it provides little supporting evidence for this young package.
Composer is used for builds, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
The repository has no security policy, so consumers are given no documented process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^4.0 || ^5.0 | — | — |
symfony/mercure Version ^0.6 || ^1.0 | — | — |
magento/framework Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.