It has a clear MIT license, tests, minimal runtime dependencies, and strong release activity over many years. The beta status and no commits in the last three months warrant caution, although the repository was pushed with the current release.
69%
Total Score
75
100
83
100
There were zero commits and zero active maintainers in the last three months, which is a real maintenance warning. The recent push and frequent registry releases reduce, but do not eliminate, the risk that source development has slowed.
The repository has six stars and one fork, showing limited external adoption. Popularity is supporting evidence only, so this modest reach does not outweigh the mature release history and organization backing.
Composer is used for builds, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe, especially given the package's small dependency surface.
Version 9.2.0-beta6 is a prerelease, so its API or behavior may still change; however, prereleases represent only 30% of recent releases and the major line is established.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.