This is a promising but very new package: it has a clear MIT license, a matching repository with substantial documentation, source files, CI tooling, and a comprehensive repository test suite, while requiring no runtime Composer packages beyond PHP and ext-dom. However, it has only one release and is only 0 days old, with no observed commit activity during the preceding 3 months, no security policy, no security scanning, and an Actions workflow without explicitly declared top-level permissions. These gaps do not indicate that the package is unsafe, but they make long-term maintenance and security maturity unproven; adoption is reasonable for evaluation or controlled use, with normal dependency monitoring.
68%
Total Score
63
100
78
80
There is one registry maintainer. Because the linked repository is owned by the corresponding individual project owner, the small publishing base is consistent with a personal open-source project, but it still leaves limited apparent redundancy.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing or maintainer redundancy.
This is the first and only release, published 0 days ago, so there is no demonstrated release cadence or track record yet.
The repository records 0 commits and 0 active maintainers during the preceding 3 months. The package's 0-day age partly explains this lack of history, but maintenance capacity remains unproven.
The repository has zero stars, forks, and watchers. This is consistent with a package released 0 days ago and is weak evidence about health, but it provides no external adoption signal yet.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.