The package is clearly documented and straightforward to integrate. Organization backing, regular releases, and repository tests provide useful support, but maintenance is currently light and concentrated in one contributor.
70%
Total Score
67
100
88
83
All recent commits came from one contributor, which creates concentration risk. The organization-owned repository provides some capacity to hand maintenance off, so this is a caution rather than a severe risk.
Only one commit was recorded in the last three months, indicating light recent maintenance despite the recent release.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, making vulnerability reporting and response expectations less transparent to consumers.
Version 0.3.0 is not a stable major release, so API compatibility may still evolve, but it is not marked as a prerelease and recent releases are stable.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open-telemetry/api Version ^1.1.0 | — | — |
open-telemetry/sdk Version ^1.1.0 | — | — |
open-telemetry/sdk-configuration Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.