This is a healthy, actively maintained release with a strong release cadence, stable versioning, current repository activity, usable documentation, changelog, repository tests, and no deprecation or archival indicators. The main adoption risks are concentrated maintenance in one recent contributor, limited repository popularity, absent security scanning and security policy, and incomplete workflow permission hardening; these warrant operational caution but do not outweigh the package's sustained release and development activity. The linked repository also explicitly mentions the package, supporting repository identity and transparency.
82%
Total Score
80
100
89
80
One contributor made all 15 commits in the last three months, producing a top-contributor share of 100%. Organization backing provides some handoff capacity, but no second recent contributor is shown, so continuity risk remains.
There were 15 commits in the last three months, showing active development, but all were made by one active maintainer. Activity is healthy while contributor breadth remains limited.
The repository has modest visibility with 11 stars, 10 forks, and 1 watcher. This limits popularity-based corroboration but is supporting evidence only and does not undermine the observed maintenance record.
Composer build tooling is present, but no repository security scanning tools are reported. The missing scanning reduces assurance around ongoing supply-chain hygiene without indicating abandonment.
The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version 4.9.3 | — | — |
google/protobuf Version 5.36.1 | — | — |
firebase/php-jwt Version 7.1.0 | — | — |
guzzlehttp/guzzle Version 7.15.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.