MIT licensing, organization backing, and a single runtime dependency keep the package transparent and easy to integrate. Pin v0.3.10 if you adopt it, since ongoing maintenance is not demonstrated.
56%
Total Score
75
100
79
100
Only two releases exist, with the latest published in October 2024 and none in the last 12 months. That long release gap lowers confidence in ongoing maintenance.
The repository had zero commits and zero active maintainers during the last three months. This is the strongest evidence of slowed maintenance and abandonment risk.
Composer is used for builds, but no security scanning tooling was detected. The missing scanner is a hygiene gap rather than a severe adoption blocker.
The release is not a prerelease, but it remains on the 0.x major line, so API stability is less assured than for a stable-major package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.