Usable with caveats: it has clear licensing, tests, documentation, and organization backing, but this is a young one-release package with no repository activity for about five months. Adopt it only if you can accept uncertain maintenance and limited security-process evidence.
61%
Total Score
50
100
78
88
There have been no commits and no active maintainers in the last three months, despite the package being recently released, which is the strongest maintenance concern.
This package has only one release, published about five months ago, so there is little evidence of sustained release maintenance.
The repository has zero stars, forks, and watchers, offering no external adoption evidence; this is a supporting concern rather than a decisive health verdict for a young package.
Composer build tooling is present, but no security scanning tools were detected, leaving a gap in repository security hygiene.
The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.