The package includes a useful README and exact-version release notes, with only one runtime dependency. Maintenance is thin, and workflow pinning and security documentation need improvement before relying on it broadly.
55%
Total Score
25
100
83
75
The repository had zero commits and zero active maintainers in the last three months. For a package only 177 days old, that is a meaningful maintenance concern.
The registry lists one maintainer account, and the repository owner is an individual rather than an organization. This indicates limited visible publishing capacity, although it does not by itself show abandonment.
Only two releases were published, both on the same day, and the latest release was 177 days ago. This suggests a young project with limited demonstrated release history.
The repository has one star, one fork, and no watchers. This provides little evidence of community validation, but popularity is only supporting evidence and does not determine health.
Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.