The template is small and clearly documented, with a matching repository, an MIT license, and no install-time scripts. Its minimal dependency footprint reduces integration risk, but the project has no automated security tooling. Pin v1.0.0 if adopting it.
68%
Total Score
75
100
83
83
This package has only one release, published over a year ago, with no releases in the last 12 months. That provides limited evidence of ongoing maintenance, although a stable starter template may not need frequent releases.
There were zero commits and zero active maintainers in the last three months. Combined with the one-release history, this leaves ongoing maintenance capacity uncertain.
The repository has zero stars and forks and one watcher, offering little community validation. Popularity is supporting evidence only, so this is a modest caution rather than a decisive risk.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy. For a small static starter template this is a transparency gap, but its impact is limited because the package has a narrow dependency and execution surface.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tightenco/jigsaw Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.