Healthy and reasonable to depend on. It has recent maintenance, an organization-backed repository, release notes, tests in the source repository, and a clear README; the main caveat is that no security policy or scanning tools are reported.
86%
Total Score
100
100
88
90
Composer build tooling is present. No security scanning tools are reported, leaving a modest transparency and maintenance gap, though this package has no reported workflow activity to create additional workflow risk.
No repository security policy is reported, which weakens vulnerability-reporting transparency for a package intended to run inside applications.
Version 0.0.7 is not a stable-major release, so compatibility expectations are lower, but it is not marked prerelease and recent releases are consistently non-prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version ^1 || ^2 || ^3 | — | — |
open-telemetry/api Version ^1.0 | — | — |
open-telemetry/sem-conv Version ^1.32 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.