This release appears healthy and reasonably safe to depend on from a maintenance and transparency perspective: it is actively released, not deprecated, backed by a non-archived repository with very recent activity, and the repository contains tests, a changelog, CI workflows, documentation, and a package-name match. The main reservations are that the project is young and still below a stable major version, has only two recent contributors, lacks repository security scanning and a security policy, and uses write-capable workflow permissions in two workflows. The packaged artifact omits tests and a changelog, but the repository provides both, so that gap is compensated. Overall, this is a promising actively maintained package with some operational and maturity caveats rather than a liability.
82%
Total Score
80
100
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^5.0 | — | — |
opis/json-schema Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.