An auto-wired dependency injection container
63%
Total Score
50
100
83
90
The artifact and repository lack a README, tests, and changelog. GitHub Releases provide some release communication, but the absence of tests and basic documentation still weakens transparency and maintenance confidence.
The repository is owned by the user account ngsoft rather than an organization, so the single-publisher context offers limited visible project backing.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This conflicts with the recent release history and raises a substantial concern about current maintenance visibility.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently negative for a small package, but it provides no evidence of an engaged user or contributor community.
The repository has 0 stars and 0 forks, with only 1 watcher. Low popularity is supporting evidence rather than decisive by itself, but it provides little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1|^2.0 | — | — |
spiral/attributes Version ^3 | — | — |
symfony/service-contracts Version ^2.5|^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.