Usable with caveats: it is actively released, clearly documented, licensed, and backed by a matching repository. Adoption should account for the single-maintainer bus factor and the package's very recent, lightly established history.
72%
Total Score
75
100
89
100
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no organizational handoff capacity to offset the narrow maintainer base.
The package is only 48 days old but already has 5 releases, with a median interval of about 13 days, showing active early maintenance while leaving long-term durability unproven.
All 20 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited resilience if that contributor becomes unavailable.
Composer is used as a build tool, but no security-scanning tools are configured. The missing scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.