The package includes a substantial README and changelog, and its repository matches the package. No license is declared or included, and the repository shows no commits in the past three months; pin this version only if you can accept limited maintenance evidence.
55%
Total Score
50
81
100
Neither the package nor the repository provides a declared license or license file, creating a real adoption and redistribution concern.
This is the only release, published about six months ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, leaving ongoing maintenance capacity unproven.
Composer is used for project tooling, but no security scanning tools are present; this is a modest transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.