The package includes a substantial README, tests, an MIT license, and a matching source repository. Organization backing and a recent release help offset the narrow recent contributor activity, but security documentation is limited.
72%
Total Score
75
100
89
83
All recent commit activity comes from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit from one active maintainer was recorded in the last three months, indicating a thin recent maintenance signal despite the recent release.
The repository has only one star and no forks or watchers, so external adoption evidence is limited, though popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.