The package includes a usable README, tests, a minimal runtime dependency set, and MIT licensing. Its release history is too new to establish durability, while all recent commits come from one contributor; organization backing reduces but does not remove that risk.
68%
Total Score
75
100
83
83
This is the first release and the package is 0 days old, so there is not yet enough history to demonstrate sustained maintenance or release stability.
One contributor made all four recent commits, creating a concentrated maintenance dependency; organization ownership provides some ability to hand off maintenance but does not remove the current concentration.
Four commits occurred in the last 3 months, showing recent activity, but the small volume provides limited evidence of sustained maintenance for a newly released package.
The repository has no stars or forks and one watcher, offering little external evidence of maturity; this is supporting evidence only and is outweighed by the matching source and recent activity.
Composer is used for builds, but no security-scanning tools were detected, leaving a modest transparency and maintenance-process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.