This is a promising but very young package: it has only two releases over 41 days and remains on the 0.x version line, so API maturity and long-term maintenance are not yet established. The release is nevertheless well-scaffolded, licensed, documented, tested, non-deprecated, actively pushed, and backed by an organization-owned repository whose name and README match the package. The main concerns are complete dependence on one recent contributor, no repository security policy or security-scanning tooling, and very limited adoption evidence. It is reasonable to evaluate or adopt with normal dependency monitoring, but it should not yet be treated as a mature, low-maintenance dependency.
72%
Total Score
80
100
78
90
The package is only 41 days old with two releases and a median release interval of about 41 days. This is insufficient evidence of sustained maintenance and maturity, though it does not indicate abandonment.
One contributor made all 12 commits in the last three months, creating a clear bus-factor concern. Organization backing partially compensates because maintenance can potentially be handed off internally, but no second active contributor is shown.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a young package with no visible backlog, but it provides little evidence of an active user community.
The repository has zero stars and one fork, providing little external adoption evidence. Popularity is supporting evidence only, so this lowers confidence in maturity but is not by itself a severe health problem.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a modest transparency and hygiene gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.