This is a generally healthy and actively maintained release: the package has existed for over 6 years, shipped 48 releases including 25 in the last 12 months, has a recent release and repository push, includes a clear MIT license, comprehensive tests, documentation, CI, and no install-time lifecycle scripts. The main concerns are concentrated maintenance activity from one contributor, no repository security policy or security-scanning tooling, and minimal repository popularity and issue activity; these reduce resilience and transparency but do not outweigh the strong release cadence, organization backing, repository alignment, and artifact completeness.
82%
Total Score
60
100
83
80
Only one registry account has publish access, which creates publishing continuity risk. However, registry access records do not measure active maintenance, and the repository is organization-owned with strong release activity.
All three recent commits came from one contributor, producing a 100% top-contributor share. Organization backing offers some potential for handoff, but no second active contributor is shown, so the current bus factor remains a concern.
The repository received 3 commits in the last 3 months from one active maintainer. This shows recent activity, though the low volume and concentration limit maintenance resilience.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a quiet, small project, but it provides little evidence of an active user or contributor community.
The repository has zero stars, forks, and watchers, providing no external adoption signal. Popularity is supporting evidence rather than a verdict, so this is a modest concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.4 | — | — |
neuron-php/formatting Version 0.7.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.