The package has a clear README, release notes, and a small dependency-free artifact. Its licensing and repository identity are documented, but there is little evidence yet of sustained maintenance or security process.
58%
Total Score
50
88
83
The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
The package is brand new, with one release and no established release interval, so its maintenance and maturity are not yet demonstrated.
All recent commit activity comes from one contributor, leaving maintenance dependent on a single active developer.
Only one commit was recorded in the last three months, so there is limited observed evidence of ongoing maintenance.
Composer is used for the build, but no security scanning tool was detected, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.