The package is easy to integrate, with a clear README and release notes for this version. Its small repository has two active contributors and organization backing; no install scripts add little deployment risk.
84%
Total Score
100
88
75
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy. This weakens vulnerability-reporting transparency, but it is a limited concern alongside active maintenance and organization ownership.
Version 0.4.0 is not a stable major release, so API stability may be less established; however, it is a normal release rather than a prerelease and recent prerelease share is 0%.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mongodb/mongodb Version ^1.15 || ^2.0 | — | — |
open-telemetry/api Version ^1.0 | — | — |
open-telemetry/sem-conv Version ^1.36 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.