The small contributor footprint and absent security policy leave less evidence of long-term resilience. Recent releases, tests, release notes, and organization backing provide useful reassurance for this focused package.
72%
Total Score
63
100
89
83
One registry publishing account is a limited operational base, but the repository is owned by an organization, which provides some backing context.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of active maintenance; the recent release partly offsets this but does not remove the concern.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity to demonstrate ongoing project interaction.
Twenty-four stars and one fork indicate a small user and contributor footprint. Popularity is only supporting evidence, but this provides little resilience signal.
Composer build tooling is present, but no security scanning tools were detected, leaving security-process transparency limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.