This is a usable but very young PHP package with strong basic packaging hygiene: it has an MIT license, tests, a substantial README, a complete-looking source and test tree, no install-time lifecycle scripts, a stable 1.3.0 release, minimal runtime dependencies, and a repository that is neither archived nor mismatched with the package. The main concerns are that the project is only 176 days old, has very low adoption evidence, and records no commits or active maintainers in the last 3 months despite frequent releases; this makes long-term maintenance less certain. Missing security scanning, security policy documentation, and explicit workflow token permissions are transparency and CI-hardening gaps, though the analyzed workflow shows no dangerous patterns. It is reasonable to evaluate for use, but teams needing a mature, broadly supported dependency should seek additional maintenance evidence.
68%
Total Score
50
100
83
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.