This is a small, clearly licensed Composer package with a stable v1 release line, nine releases over approximately 358 days, a recent release, an active non-archived organization-owned repository, and two equally active contributors in the last three months. Its main weaknesses are the absence of tests, a changelog, security scanning, and a security policy, plus zero observed popularity; these reduce transparency and assurance but do not outweigh the evidence of recent maintenance and coherent package/repository contents. It appears reasonable to depend on, with normal due diligence for a small and lightly adopted package.
82%
Total Score
100
100
83
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scavix/wdf-core Version ^1.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.