The repository is backed by an organization and the release includes a README, tests, and release notes. Its small release history and absent security policy leave less evidence than a mature project would provide.
65%
Total Score
75
50
81
83
Six runtime dependencies, including the AWS SDK and OpenTelemetry components, are appropriate for this sampler's role but create a moderate dependency surface.
The package is 387 days old with only three releases and two releases in the last 12 months, indicating a modest but not abandoned release cadence.
No commits and no active maintainers were recorded in the last three months, a meaningful maintenance warning; the recent release and repository push provide only partial compensation.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no published security policy, reducing transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.0 | — | — |
open-telemetry/api Version ^1.1.0 | — | — |
open-telemetry/sdk Version ^1.1.0 | — | — |
open-telemetry/sem-conv Version ^1.32 | — | — |
open-telemetry/sdk-configuration Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.