The package has a clear README, changelog, matching repository, GPL-3.0-or-later license, and organization backing. Read-only workflow permissions and recent publication help, but limited maintenance depth and workflow pinning reduce confidence.
68%
Total Score
67
83
50
This is a young package, about seven months old, with two releases and a roughly four-month median interval; that provides limited evidence of long-term maintenance.
One contributor made all two recent commits. Organization backing provides some handoff capacity, but no second active contributor is visible in the period measured.
Only two commits were recorded in the last three months, which is modest activity for a package with ongoing maintenance needs.
Composer build tooling is present, but no security scanning tools were detected, leaving a maintenance and verification gap.
The repository has no security policy, reducing transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version * | — | — |
open-telemetry/api Version ^1.1 | — | — |
open-telemetry/sdk Version ^1.13 | — | — |
symfony/http-client Version ^7.4 | — | — |
open-telemetry/opentelemetry-logger-monolog Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.