53%
Total Score
50
80
75
Eight runtime dependencies create a relatively broad dependency surface for a young package, increasing transitive maintenance and compatibility exposure.
The artifact contains only LICENSE and composer.json, offering little packaged context for consumers and reinforcing the limited transparency of this release.
The artifact has no README, which makes library integration less convenient; absent tests and changelog are normal for a published artifact and are not concerns here.
The package is only 27 days old with three releases, so its maintenance record and long-term stability are not yet established.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
exception/unexpected Version ^1.0.0 | — | — |
standard-library/x509 Version ^1.0.38 | — | — |
standard-library/exception Version ^1.0.38 | — | — |
standard-library/jose-cose Version ^1.0.38 | — | — |
standard-library/foundation Version ^1.0.38 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.