Recent repository work comes from two contributors, and the release includes notes and a usable README. The 0.x line and lack of a security policy leave some maturity and transparency limits.
78%
Total Score
83
100
81
83
This package has only one release, published about nine weeks ago, so its long-term maintenance record is still unproven. The linked repository has recent activity, which partly offsets the limited release history.
Two contributors are active, but one supplied two of the three recent commits, leaving some contributor concentration. Organization backing provides partial continuity support.
Composer build tooling is present. No security scanning tool was detected, which is a modest transparency gap rather than evidence of unsafe code.
The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.
Version 0.4.0 is a stable release rather than a prerelease, but the 0.x major line indicates an earlier-stage API and project maturity profile.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open-telemetry/api Version ^1.0 | — | — |
open-telemetry/sem-conv Version ^1.30 | — | — |
symfony/polyfill-mbstring Version ^1.31 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.