The package includes a substantial README, tests, and a clear MIT license. Its repository is active and organization-owned, but the short history and lack of dedicated security practices leave limited evidence of long-term maturity.
70%
Total Score
83
81
75
Six releases over 10 days show active early development, but the package is only 48 days old, so long-term maintenance cannot yet be established.
All 11 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.
Composer and CMake build tooling are present, but no security-scanning tools were detected, leaving a modest transparency and assurance gap.
The repository has no security policy, reducing clarity about vulnerability reporting and response for a package that installs and configures native dependencies.
Version 0.7.2 is not a prerelease and recent releases are consistently stable, though the pre-1.0 major version indicates that compatibility may still change.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/prompts Version ^0.3 | — | — |
symfony/console Version ^7.0|^8.0 | — | — |
symfony/process Version ^7.0|^8.0 | — | — |
symfony/filesystem Version ^7.0|^8.0 | — | — |
projectsaturnstudios/pocketflow-php Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.