The package is clearly scoped, documented, licensed, and dependency-light. Repository tests are present, installation has no lifecycle scripts, and the workflow audit found no dangerous patterns, though its actions are unpinned.
67%
Total Score
50
100
88
67
This is a newly published package with one release and no established release cadence, so its maintenance maturity cannot yet be demonstrated.
One contributor made all recent commits, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.
Four commits in the last three months show recent work, but the limited activity is consistent with a brand-new project rather than established maintenance.
Composer build tooling is present, but no repository security-scanning tool was detected, leaving security-process coverage limited.
The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.