Maintenance is quiet between infrequent releases, and this is an alpha release with limited adoption evidence. Organization backing, tests, licensing, and a clean workflow audit provide useful support, but the repository mismatch and unpinned actions reduce transparency.
58%
Total Score
75
71
67
The package is established, but it has only four releases since November 2022 and one release in the last 12 months, with a median interval of about 533 days; this indicates a slow maintenance cadence.
The repository had no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance even though a recent release exists.
The repository name does not match the package name and its README does not mention the package, so the link may represent a subpackage or a repository association that is not transparent.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
micro/kernel Version ^2.0 | — | — |
micro/autowire Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.