The repository includes tests, a substantial README, and a straightforward Composer build. Workflow references are unpinned, and no security policy or scanning is provided, adding maintenance and supply-chain hygiene concerns.
62%
Total Score
50
83
50
This is the package's only release, published 54 days ago, so there is not enough release history to demonstrate mature maintenance or compatibility stability.
One contributor made all five recent commits, leaving maintenance highly concentrated in a single individual with no demonstrated handoff capacity.
Five commits occurred in the last three months, showing some activity, but the small volume provides only limited evidence of sustained maintenance.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that executes arbitrary PHP expressions by design.
The assessed version is a prerelease alpha and all recent releases are prereleases, so consumers should expect an evolving API and limited production maturity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.