The package includes tests, a clear README, and a permissive license. Its organization backing helps, but the release appears dependent on one active contributor and has limited security-process evidence.
68%
Total Score
83
100
83
83
All 35 recent commits came from one contributor, leaving maintenance capacity concentrated despite the repository being organization-owned. The organization provides some handoff potential, but no second active contributor is shown.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of visible adoption provides little external maturity validation.
Composer is used as a build tool, but no security scanning tool is detected. The missing scanner is a process gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving reporting and response expectations undocumented. This is a transparency gap, not a standalone dependency blocker.
The current release is not a prerelease, but it remains on major version 0, so compatibility and maturity are less established than for a stable-major package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
piedweb/curl Version * | — | — |
symfony/cache Version ^7|^8 | — | — |
piedweb/extractor Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.