The package is small and has no install-time scripts, reducing integration overhead. Its limited project history leaves little evidence for long-term maintenance.
58%
Total Score
67
81
75
The artifact has no README, which makes consumer integration less transparent for a library; the absence of tests and a changelog is normal packaging practice and is not penalized.
This is a young package, released only once 46 days ago, so there is not yet enough history to demonstrate sustained maintenance.
One contributor made all commits during the last three months, leaving maintenance dependent on a single individual.
Only one commit was recorded in the last three months, providing weak evidence of ongoing maintenance despite the repository being recently updated.
Composer is used for the build, which fits the package ecosystem, but no security scanning tooling was detected, leaving a modest transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.