Documentation, a changelog, and repository backing make the package reasonably transparent to integrate. The absent tests and security policy leave less evidence for ongoing care.
60%
Total Score
75
100
78
83
A LICENSE file is present and the artifact declares MIT, but the detected text is MIT-0, creating a license identity mismatch that should be clarified.
The package has only two releases and none in the last 12 months; its latest release was 529 days ago, which is a meaningful maintenance concern.
There were zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional confidence in project maturity.
Composer is used for builds, but no security scanning tool is present, leaving a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.