This is a young but currently credible package release: it is only 54 days old and remains pre-1.0, so API and operational maturity are not yet established, but the repository is active, unarchived, recently pushed, and contains a substantial test suite, changelog, CI workflow, and a coherent 33-file artifact. The package is MIT-licensed, has no install-time scripts, is not deprecated, and its repository matches and documents the package. The main concerns are the very small two-contributor base, zero recorded popularity or issue activity, lack of a security policy and explicit GitHub Actions token permissions, and absence of security scanning; these warrant review before adopting it for critical workloads but do not indicate abandonment or an unfit dependency.
82%
Total Score
60
100
78
80
Only one registry account has publish access, which limits publishing redundancy; repository evidence shows a second active contributor, but that does not remove the registry-side concentration.
The repository is owned by an individual user rather than an organization, so there is no organization-level maintenance backing to offset the small contributor base.
The package is very young at 54 days with four releases, so its maintenance history is still limited, although releases have continued through the assessed version.
Two contributors are active, but the top contributor made 75% of recent commits. The second contributor provides some continuity, while the concentration still creates a modest bus-factor concern for a user-owned project.
There are no issues or pull requests and no activity in the last month; this may reflect the package's youth, but it provides little evidence of an established maintenance and support process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/process Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/messenger Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/framework-bundle Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.