The repository is tiny and offers no tests or security policy, leaving integration quality and response practices less proven. A clear README, matching source repository, Composer build setup, and GitGuardian scanning provide useful transparency.
60%
Total Score
50
75
50
The repository recorded 0 commits and 0 active maintainers in the last 3 months. For a package only about 5 months old, this is a meaningful sign of limited ongoing maintenance.
The package has four releases, all published within roughly 1 hour, and no newer release for about 5 months. This suggests an early burst of development followed by a prolonged pause.
The repository has 0 stars, forks, and watchers, indicating no visible external adoption or review. Popularity is supporting evidence only, so this modestly lowers confidence rather than deciding the verdict.
The linked repository has no security policy. This is a modest transparency gap for a package handling authentication tokens and subscriber data.
Version v0.1.3 is not a stable major release, so the API may still change substantially. It is not marked as a prerelease, which provides some compensating stability.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.