The MIT license, included tests, and active two-person development are reassuring. The repository matches the package and is not archived, with no install-time scripts.
68%
Total Score
100
100
79
75
Fifty-two releases in 74 days show active publishing, but the very short project history and extremely rapid cadence provide limited evidence of long-term stability.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest supply-chain hygiene gap.
The linked repository has no published security policy, reducing transparency about vulnerability reporting and response expectations for a framework package.
Version v0.30.0 is pre-1.0, and the package documentation explicitly warns that the API may change between minor versions, so adopters should expect compatibility work.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.