The package has shipped 19 releases in 50 days, includes a substantial README and release notes, and is not deprecated or archived. Composer builds are present, but no repository security scanner was found.
68%
Total Score
50
100
94
100
The repository is owned by a user account rather than an organization, so the single-maintainer concentration is not visibly offset by organizational backing.
One contributor made 100% of the 79 recent commits, leaving little visible redundancy if that maintainer becomes unavailable.
The repository made 79 commits in the last three months, showing strong recent activity, but all of that activity came from one active maintainer.
Composer is used for builds, but no security-scanning tool was detected; this is a moderate transparency and maintenance gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.