The package has a clear Apache-2.0 license and a substantial README, which improve transparency for consumers. Its single-maintainer model and lack of a security policy leave less evidence of durable maintenance.
62%
Total Score
50
88
75
Only one registry maintainer is listed, which creates a thin publishing base and increases continuity risk for a package with no established release history.
This is the package's first release, published today, with only one release recorded; that provides no evidence of an established release or maintenance track record.
There were zero commits and zero active maintainers in the last three months, but the repository was created or updated today, so this is limited evidence of abandonment rather than proof of it.
The repository uses Composer, showing basic build tooling, but no security scanning tools were detected, leaving security-maintenance practices unverified.
No security policy was found in the repository, so users have no documented reporting path or disclosed security-handling process.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.