The prerelease label and one-person recent commit base add adoption and continuity risk. Licensing, dependency scope, install behavior, and organizational ownership are reassuring, while the small subsplit artifact is expected.
80%
Total Score
67
100
86
100
All 3 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.
There were 3 commits in the last 3 months, showing recent activity but at a modest pace for a package with a single active maintainer.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest process gap rather than evidence of unsafe code.
Version 9.2.0-beta6 is a prerelease, and 30% of recent releases were prereleases, so consumers should expect some release-level uncertainty despite the stable major line.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.