The package has a clear README, an MIT declaration, and no install-time scripts. Low adoption plus no security policy or scanning reduce transparency, while recent inactivity leaves maintenance dependent on a single publisher.
72%
Total Score
50
89
88
Registry publishing access is held by one maintainer. The linked repository is also owned by an individual rather than an organization, so there is limited visible redundancy if that person stops maintaining it.
The registry namespace is backed by an individual repository owner, not an organization. This is consistent with the single-maintainer picture and provides limited organizational continuity.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a release was published recently, the lack of recent commit activity increases maintenance risk.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counters provide little external evidence of adoption or community support.
The repository uses Composer, but no security scanning tools were detected. For a small package this is a hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.