Healthy and suitable to use, with a short track record. It has recent releases, active two-person development, tests, release notes, and clear licensing; the main caveats are its young project age, very small user base, and lack of a security policy or scanning setup.
82%
Total Score
83
100
83
88
The package and repository are owned by the same individual account, which confirms ownership alignment but provides less organizational continuity than an organization-backed project.
The project is only 79 days old with five releases and a median interval of about 8 days. This shows active early development, but the short history limits evidence of long-term stability.
The repository has only 3 stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide little external validation for a project that is only 79 days old.
Composer build tooling is present, but no security-scanning tool is reported. This is a transparency and process gap, not evidence that the release is unsafe.
No SECURITY.md or equivalent security policy is present, leaving vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.