Risky to adopt for now: this is a newly published framework with no license, no README, and no demonstrated maintenance activity. The linked repository is minimal and does not clearly match the package, so wait for clearer project ownership and ongoing development.
42%
Total Score
50
63
80
No declared license or license file was found in the package or repository, leaving the legal terms for using this framework unclear.
The release contains only four files—composer.json and three source files—with no consumer documentation or broader project structure visible. This makes the framework difficult to evaluate and increases maturity concerns.
The package has no README, which is a meaningful transparency and integration gap for a framework; the absence of tests and a changelog in the artifact is normal packaging practice.
The package has only one release and was first published today, so there is no release track record or evidence of sustained maintenance yet.
There have been no commits or active maintainers in the last three months, although the repository was pushed today and the project is newly created; this shows no established maintenance capacity yet.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.