The package is clearly documented, licensed, and backed by an organization with repository tests. Its publication history is too new to demonstrate sustained maintenance, and the repository has no security scanning or security policy.
68%
Total Score
100
100
81
83
This is the package's first release, published 0 days ago, so there is no release track record or demonstrated maintenance cadence yet.
The repository uses Composer, but no security scanning tools were detected; that is a modest transparency and maintenance gap for a native extension.
The repository has no security policy, leaving vulnerability-reporting expectations unspecified.
Version v0.10.0 is not a prerelease, which helps, but the 0.x major version still indicates an API that may change before 1.0.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.