Documentation is substantial, the release includes upgrade notes, and the project has tests, static analysis, and tightly scoped workflows. The main limitation is that all 15 recent commits came from one contributor, with no security policy and no visible community traction.
78%
Total Score
70
100
94
83
Only one registry account has publish access. This is a small publishing base, though repository activity shows that the same owner is actively maintaining the project.
The repository is owned by an individual account rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.
One contributor made all 15 commits in the last 3 months, leaving no demonstrated backup maintainer and increasing continuity risk for a young package.
The repository has zero stars, forks, and watchers. For a package only 92 days old this is weak supporting evidence rather than proof of poor quality, but it provides no community validation.
The repository has no SECURITY.md or other detected security policy, which leaves vulnerability reporting and response expectations unclear for security-sensitive webhook infrastructure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.