The repository has tests, organization backing, and a clean read-only release workflow. Its single release and pre-1.0 version leave limited evidence of long-term maintenance, so pin this version and reassess future updates.
78%
Total Score
75
100
79
88
This is the package's first release, published less than an hour before collection, so there is no meaningful track record yet; the linked project and release notes provide some transparency.
No commits or active maintainers were recorded in the prior three months, but the package itself was only released moments before collection, making this a limited history rather than evidence of a collapsed project.
Composer and Make are used for the build, but no security scanning tool was detected; this is a modest transparency gap for a new package.
The repository has no security policy, leaving vulnerability-reporting guidance unspecified; the absence is a minor gap rather than evidence of unsafe code.
Version 0.1.0 is not a stable major release, which signals a young API and possible compatibility changes; it is not marked prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open-telemetry/api Version ^1.6 | — | — |
open-telemetry/sem-conv Version ^1.38 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.