The package includes a useful README, broad tests, a license, and no install-time scripts. Its pre-1.0 maturity and unpinned workflow actions call for extra caution.
61%
Total Score
75
79
50
The package is over three years old with seven releases, but only one release in the last 12 months. The recent July 2026 release partly offsets the otherwise light current cadence.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release is some compensating evidence, but the current maintenance signal remains weak.
Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
Version v0.1.6 is not a stable-major release, which indicates an API still below 1.0 and adds compatibility uncertainty for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
nytris/nytris Version ^0.1 | — | — |
asmblah/php-code-shift Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.