The README is present, the package maps cleanly to its repository, and installation has no lifecycle scripts. The single maintainer, absent tests and security policy, and minimal project activity leave little ongoing assurance.
42%
Total Score
50
100
69
88
The latest release was in December 2019, with no releases in the last 12 months; this indicates nearly seven years without demonstrated maintenance.
Only one registry maintainer is listed. That is consistent with this user-owned project, but it leaves little visible publishing redundancy if the maintainer becomes unavailable.
The repository is owned by the same individual namespace as the package, with no organization backing indicated. This is coherent ownership but offers limited institutional continuity.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of broad review or community resilience.
Composer is used as the build tool, but no security-scanning tooling is present; this is a modest transparency and maintenance gap for a dependency project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.