Healthy and reasonable to use. It has recent releases, an active unarchived organization-backed repository, balanced contributor activity, clear documentation, and release notes; the main caveat is the absence of a security policy and automated security scanning.
88%
Total Score
100
88
83
The repository uses Composer build tooling, appropriate for this PHP package, but no security-scanning tools were detected. This leaves a supply-chain hygiene gap without showing that the release is unsafe.
No security policy was found in the linked repository. For an organization-backed instrumentation package this reduces vulnerability-reporting transparency, though it is not evidence of abandonment by itself.
Version 0.0.8 is not a stable-major release, but it is not marked prerelease and recent prerelease share is zero. This is a maturity caveat rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open-telemetry/api Version ^1 | — | — |
open-telemetry/sem-conv Version ^1.32 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.