The MIT license, repository tests, and recent pull-request activity support adoption. Install-time scripts, two workflows with broad write permissions, and a single active contributor warrant extra maintenance and release review.
64%
Total Score
67
79
50
The package runs post-install and post-update scripts, which add installation-time behavior that consumers should review before adopting.
Only two releases exist across 391 days, with one release in the last 12 months and a median interval of about 322 days; this suggests a young, infrequent release process.
One contributor made all 2 recent commits, concentrating current maintenance capacity; organization ownership provides some handoff potential but no second active contributor is shown.
The repository had only 2 commits in the last 3 months, although recent pull requests were merged; maintenance activity exists but is light.
The project uses Make and Composer, but no security-scanning tool was detected, leaving a modest assurance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bunny/bunny Version 0.6.0-alpha.3 | — | — |
nyholm/psr7 Version ^1.8.2 | — | — |
open-telemetry/api Version ^1.4.0 | — | — |
open-telemetry/sdk Version ^1.6 | — | — |
symfony/http-client Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.