This release is usable but still immature as a dependency. It has a matching repository, a license file, a changelog, a substantial artifact with examples, no install-time lifecycle scripts, no deprecation status, and only a modest runtime dependency profile. However, it is just 7 days old with one release, has no tests, has only 3 commits from one contributor, lacks a security policy and security-scanning tooling, and has no demonstrated adoption through repository popularity; these gaps make long-term maintenance and release reliability uncertain. Consider depending on it only if its limited Community Edition scope fits your needs and you can tolerate validating future maintenance yourself.
62%
Total Score
50
100
78
90
One registry maintainer, NarceaLabs SL, is a limited publishing base, but registry access reflects who can publish rather than actual maintenance activity; repository activity provides the more relevant evidence here.
A README of 1,816 characters and a changelog are present, and the repository also has a changelog, but neither the artifact nor repository contains tests. The documentation and release-note coverage compensate for some hygiene concerns, while the absent tests remain a modest maintenance risk.
The repository is owned by the user account phpdocx rather than an organization, so the single-contributor maintenance concentration is not visibly offset by organizational backing.
The package is only 7 days old and has a single release, so there is not enough release history to establish maintenance continuity or mature release practices.
All 3 recent commits came from one contributor, giving the project a bus factor of one and creating a genuine continuity risk if that contributor becomes unavailable.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.