Its small scope, clear README, and release notes make the package easy to inspect. The source organization provides backing, but recent repository activity is absent and no security policy or scanning was found.
65%
Total Score
67
81
75
The package declares GPL-2.0-or-later, while the repository license file was detected as GPL-2.0; the release is licensed, but the scope mismatch warrants checking compatibility.
The package has three releases, all published on the same day, so it shows initial release activity but no established release cadence yet.
The repository recorded zero commits and zero active maintainers in the last three months, leaving weak evidence of ongoing maintenance despite the repository being active enough to publish this release.
There were no new or closed issues or pull requests in the last month, which adds to the limited evidence of current project activity but is not severe for a small package.
Composer build tooling is present, supporting a standard build path. No security scanning tools were found, which is a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.