The repository is small and has no automated security scanning, while one person publishes it. A clear MIT license, readme, release notes, and no install-time scripts provide useful transparency.
62%
Total Score
50
100
83
88
The registry namespace and repository belong to the same individual account, so the package identity is consistent. Individual ownership provides less organizational continuity than an established project-backed team.
The package is 132 days old but has only one release, so there is not enough release history to demonstrate sustained maintenance.
There are no issues or pull requests and no recent issue activity. For a project with only one release, this leaves maintenance responsiveness unproven rather than demonstrating a serious failure.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external sign of adoption or community support.
Composer is used for builds, but no security scanning tool is configured. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.