This is a very small, stable-major Composer package with a clear MIT declaration, no install-time scripts, an unarchived repository, and a repository that matches the package name. However, it is extremely new—released within minutes of the assessment—with no observed commit activity, no tests, README, changelog, security policy, or security scanning, and only one registry maintainer. Those gaps do not make the package unfit by themselves for such a minimal utility, but the lack of history and maintenance evidence creates meaningful adoption risk until the project demonstrates continued activity and clearer documentation.
58%
Total Score
50
78
90
Only one registry account has publish access. That is a narrow publishing base and increases continuity risk, although registry access alone does not establish actual maintenance activity.
The artifact and repository contain no README, tests, or changelog. For a tiny utility this is partly understandable, but the absence of both packaged and repository tests or documentation reduces transparency and verification.
The repository is owned by an individual user rather than an organization. Individual ownership is valid, but it provides less visible institutional continuity for a package with only one registry maintainer.
The package is brand new, with four releases published within roughly 23 minutes and no meaningful age or historical maintenance record. Rapid initial releases do not compensate for the absence of longer-term evidence.
No commits and no active maintainers were observed over the last three months. Because the project was only created recently, this is partly explained by its age, but there is still no demonstrated ongoing maintenance capacity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.