Usable with caveats: the repository is active, unarchived, and has two recent contributors, but this is a very new one-release package with no consumer README and a repository name that does not match the package.
62%
Total Score
75
100
69
50
The published artifact has no README, which makes a small interface package harder to adopt and understand. Missing tests and changelog files are not concerns here because they are commonly kept in the source project or omitted from published packages.
Only one release has been published over roughly 10 weeks, so there is little evidence of release maturity or long-term maintenance.
Two commits from two active maintainers in the last three months show recent activity, although the volume is still too small to demonstrate a mature maintenance cadence.
The repository name does not match the package name, and the README does not provide a confirming package mention. This creates some uncertainty that the repository is the intended source, despite the otherwise coherent package file tree.
Composer is used as a build tool, but no security scanning tooling is present, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.