This is a credible but very new v1.0.0 package with a linked, non-archived organization-owned repository, a clear MIT declaration, substantial README documentation, a complete-looking 59-file source and test tree, and no install-time lifecycle scripts. The main concerns are that it has only one release and is zero days old, all five recent commits came from one contributor, and the repository has no security scanning, security policy, or workflow automation. It is reasonable to evaluate or adopt with normal dependency pinning and monitoring, but its long-term maintenance maturity is not yet demonstrated.
68%
Total Score
75
100
88
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
firebed/aade-mydata Version ^5.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.