It has a clear MIT license, a focused dependency footprint, repository tests, and release notes for this version. Its young project has little demonstrated maintenance capacity, so pinning this version is prudent.
63%
Total Score
75
100
88
75
The package is 276 days old with three releases, all published on the same day, so its longer-term release cadence is not yet demonstrated.
The repository recorded zero commits and zero active maintainers during the past three months, leaving little evidence of ongoing maintenance after the initial release.
The repository uses Composer, but no security-scanning tool was detected; this is a modest transparency and maintenance gap for a dependency project.
No security policy was found in the repository. For a small library this is a hygiene gap rather than evidence that the package is unfit to use.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.