The README is detailed, licensing is clear, and installation has no lifecycle scripts or third-party runtime packages. There are no tests or security policy, and recent work is limited to one contributor.
62%
Total Score
50
100
83
75
This is a young package, released three times since June 2026 with a median interval of about 26 days. The cadence shows active initial development but provides limited evidence of long-term maintenance.
All recent commits come from one contributor, creating a high concentration risk. The repository owner is an individual account, so no organizational handoff evidence compensates for that concentration.
Only one commit was recorded in the last three months, by one active maintainer. For a young security-sensitive SDK, this is limited evidence of sustained maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any adoption signal adds modest uncertainty for a young package.
Composer is used for builds, but no security scanning tooling is present. For an SDK handling authenticated secret access, this is a meaningful but not severe transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.