The repository has no security policy or automated security scanning. The six-file artifact is clear and dependency-light, with no install scripts.
58%
Total Score
50
100
81
88
This is the package's first release, published 0 days ago, so there is no track record yet to demonstrate sustained maintenance or release stability.
There were 0 commits and 0 active maintainers in the past 3 months. Because the repository is brand new, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity unverified.
The repository has 0 stars, forks, and watchers. This is consistent with a newly published project and is supporting evidence only, but it provides no external maturity signal.
Composer is used as the build tool, but no security-scanning tools are configured. For an SDK handling authentication and webhook signing, that is a genuine maintenance and transparency gap.
The repository has no security policy. For an SDK handling API credentials and signed webhooks, the absence of documented vulnerability-reporting guidance lowers transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.