It includes a license, README, release notes, and a very small runtime dependency surface. The repository has had no recorded commits or issue work in the last three months, and it has no security policy or scanning; pin this version only if that maintenance trade-off is acceptable.
68%
Total Score
50
100
83
75
The package and repository are owned by the same individual account, providing consistent ownership context but no organizational backing or larger maintainer base.
There were 0 commits and 0 active maintainers in the last 3 months. The recent release partly offsets this because the repository was pushed with that release, but current development capacity is still unclear.
There is one open issue, with no new or closed issues and no pull-request activity in the last month. This supports the concern that ongoing maintenance and issue response are limited.
The repository has only 2 stars, 6 forks, and 2 watchers. Low popularity is supporting evidence of a small project rather than a health verdict, but it provides little evidence of broad community support.
Composer is used for build or package management, which is appropriate, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.