Clear documentation, release notes, and a small dependency surface make integration easier. The license and security policy improve transparency, but the project has limited independent assurance so far.
62%
Total Score
50
100
88
100
Registry publishing access is held by one account. This is a modest publishing-continuity concern, especially alongside the single active repository contributor.
The package is only 48 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance or compatibility stability.
One contributor made all four commits in the last three months, leaving maintenance highly concentrated with no demonstrated handoff capacity.
The repository has four commits in the last three months, showing recent activity, but the activity is still limited for a package with only one release.
Composer is used for builds, but no security-scanning tool was detected. That limits automated assurance without making the package unfit by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.