Documentation and tests are present, with a clean dependency profile and no install scripts. The organization-backed repository is not archived, but it lacks a security policy.
64%
Total Score
75
100
79
75
This is the package's first and only release, published about 5 months ago, so there is little evidence of an established release track.
The repository recorded no commits and no active maintainers during the last 3 months, which weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Version 0.0.1 is not a stable major release, which indicates an early-stage API and a higher likelihood of breaking changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.