This is a usable but very young package with solid basic transparency: it includes a license file, README, source layout, examples, and a substantial test suite, and the repository has received 52 commits in the last 3 months. However, it has only one release at version 0.0.1, all recent commits come from one contributor, and the repository has no security policy or security-scanning tooling. The package is not deprecated or archived, so adoption is reasonable for experimental or well-isolated use, but its maturity and maintainer-resilience risks warrant caution for critical production dependencies.
68%
Total Score
75
81
88
The package is only 33 days old and has a single release, so there is little evidence of release-process maturity or long-term maintenance.
All 52 recent commits came from one contributor, creating a material continuity and handoff risk for a user-owned project.
Composer build tooling is present, but no security-scanning tooling was detected; this is a hygiene gap for supply-chain assurance.
The repository has no security policy, leaving vulnerability-reporting and disclosure expectations undocumented.
Version 0.0.1 is an early, non-stable-major release, which signals API and behavior may change substantially before maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/collections Version >=10.0 | — | — |
shufflingpixels/php-io Version =0.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.