This is a usable but young package with several positive supply-chain health indicators: it is not deprecated or archived, has a matching repository with a substantive README and repository test suite, uses ordinary Composer tooling, has no install-time lifecycle scripts, and is maintained under an organization-owned repository. However, the package is only 53 days old with three releases, remains on the 0.x version line, and all three recent commits came from one contributor. The artifact also omits tests and a changelog, while the repository has no security policy or security scanning; the repository tests compensate for the missing packaged tests, but the limited history and concentrated activity warrant caution before adopting it as a critical dependency.
72%
Total Score
63
100
78
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpdot/contracts Version ^0.3 | — | — |
psr/simple-cache Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.