The package has tests, a readable artifact, and a small runtime dependency set. Limited repository security guidance makes response expectations less clear.
58%
Total Score
50
100
75
75
The manifest declares a proprietary license, so the release is licensed rather than lacking licensing information; however, that may limit use in projects requiring an open-source license.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release history.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly demonstrated and may complicate maintenance ownership.
The repository uses Composer and Make, but no security scanning tools were detected; this is a modest transparency and maintenance gap.
No security policy was found, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.2 | — | — |
moneyphp/money Version ^4.0 | — | — |
marc-mabe/php-enum Version ^4.0 | — | — |
micro-module/geotools Version ^0.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.