The package includes tests, a changelog, release notes, and a substantial documented source tree. Its single-maintainer publishing setup and lack of a license or security policy leave important project-governance gaps.
62%
Total Score
67
100
81
50
No license declaration, recognized license text, or license file was found in the package or linked repository, leaving the terms for reuse unclear.
Only one registry publishing maintainer is listed; the organization-owned repository provides some backing, but the publishing base remains narrow.
The project has existed for about 7 years and published 36 releases, but only one release appeared in the last 12 months, indicating a currently slow release cadence.
No commits and no active maintainers were recorded in the last 3 months, which is a meaningful maintenance concern despite the recent release push.
Composer and Make are used for project tooling, but no security-scanning tool was detected, leaving automated security coverage unconfirmed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.