The package has no README, tests, or security scanning, making integration and review harder. Its Composer build is straightforward, but the single publisher and limited project history provide little evidence of long-term maintenance.
58%
Total Score
83
50
81
83
The package declares 17 runtime dependencies and no development dependencies, indicating a broad runtime surface and little visible project-test tooling in the package metadata.
Only one registry publisher is listed, which leaves a thin publishing base; the linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader institutional support.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README is a real integration and transparency gap for a framework library.
The package is 0 days old and has only 3 releases within roughly 7 hours, so there is not yet enough history to demonstrate sustained maintenance or release stability.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest review gap for a package with many runtime dependencies.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
niangpro/auth Version self.version | — | — |
niangpro/core Version self.version | — | — |
niangpro/http Version self.version | — | — |
niangpro/mail Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.