Clear documentation, tests, release notes, and a small dependency set support dependable adoption. The project is young and has limited recent activity, so future maintenance depends heavily on one person.
73%
Total Score
50
100
88
83
Only one registry maintainer is listed. The matching user-owned repository confirms an identifiable publisher, but there is no second publishing contact if that person becomes unavailable.
The package and repository are both owned by the same individual account, which supports provenance but offers no organization-level maintenance redundancy.
Four releases in 97 days, including a release 20 days ago, show active early development; the short history still provides limited evidence of long-term maintenance.
One contributor made all recent commits, so maintenance and release knowledge are concentrated in a single person.
Only one commit was recorded in the last three months, despite the recent release, leaving limited evidence of sustained repository activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mbolli/php-ron Version ^0.3 || ^0.4 || ^0.5 | — | — |
tempest/highlight Version ^2.17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.