The stable release and Composer security tooling provide some reassurance, but maintenance evidence is thin. The linked repository does not clearly identify this package, making provenance and future support less certain.
55%
Total Score
50
100
67
100
This package has only one release, published 126 days ago, so there is little release history to demonstrate sustained maintenance or stability.
The repository recorded zero commits and zero active maintainers in the last 3 months, leaving limited evidence of ongoing maintenance after the initial release.
The repository name does not match the package name, and no README package mention was found. That weakens confidence that the linked repository is the package's clearly maintained home, although subpackages can use monorepo repositories.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
micro-module/jwt Version ^0.6 | — | — |
micro-module/base Version ^0.14 | — | — |
micro-module/enqueue Version ^0.10 | — | — |
micro-module/broadway Version ^2.6 | — | — |
micro-module/job-queue Version ^0.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.