It has a clear MIT license, useful documentation, repository tests and changelog, and organization-backed source. The small dependency footprint and lack of install-time scripts reduce routine adoption risk.
64%
Total Score
75
100
83
100
The package has 11 releases, all published within one day, with no later release shown over roughly 11 months. That rapid initial burst followed by a long pause raises maintenance uncertainty.
The repository recorded 0 commits and 0 active maintainers over the last three months, consistent with the long pause after the initial release burst. This is a meaningful abandonment concern for a young package.
The project uses Composer, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.