This release has solid structural and transparency indicators: it is not deprecated or archived, has a matching repository, a substantial README, repository tests, Composer build tooling, and no install-time lifecycle scripts. However, the package has only one release and is zero days old in the collected registry history, while repository activity shows no commits or active maintainers in the last three months; these values may reflect the newly observed publication but provide no evidence of established maintenance. The repository also lacks a security policy and explicit workflow token permissions, and has no security scanning tooling. Overall, it is usable but should be adopted cautiously until a longer release and maintenance history is available.
68%
Total Score
63
100
78
80
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.