Usable with caveats: this is a newly published installer with clear licensing, a matching organization-backed repository, and no deprecation or archive signal. It has only two releases, no tests or changelog, and no security policy, so its maintenance and transparency record are still limited.
70%
Total Score
100
100
75
83
A substantial README explains the installer's purpose and requirements, but neither the artifact nor repository contains tests or a changelog. For an installer, missing tests reduce confidence in maintenance and regression handling.
The package is only 1 day old with two releases, so there is not enough history to demonstrate sustained maintenance or long-term stability.
The repository has zero stars, forks, and watchers. Because the project is only 1 day old, this is weak maturity evidence rather than a severe concern.
Composer is used as the build tool, but no security-scanning tooling is configured. The missing scanning is a transparency gap, while the absence of build tooling is not a concern.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
rnd-innovations/devy-core Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.