Composer plugin that extends the built-in path repository with additional version metadata detection and tolerant (non-failing) path matching.
68%
Total Score
60
100
88
83
Only one registry account has publish access. That is consistent with the user-owned project, but it leaves little publishing redundancy.
The registry and repository are owned by the same individual user, so ownership is coherent but does not provide organization-level maintenance redundancy.
The package is young at 85 days with three releases and a median interval of about 23 days, showing ongoing delivery but limited long-term history.
All 17 recent commits came from one contributor, so the project has a low bus factor and limited demonstrated handoff capacity.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this provides little evidence of community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.