This is a very new, minimally scoped package with a valid MIT license, no deprecation notice, no install-time lifecycle scripts, and a simple Composer-based structure, which limits some operational risk. However, it has only one release at version 0.0.1, no README, tests, or changelog in either the artifact or repository, no observed commit activity yet, no security policy or scanning tooling, and the linked repository name does not match the package name. These gaps make maintenance maturity and package provenance less transparent, so adopting it is reasonable only if its small API is independently reviewed and the project’s early-stage status is acceptable.
52%
Total Score
50
100
67
80
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.