Usable with caveats: the repository is active, organized, licensed, and backed by an organization, but this is a same-day release with little track record. Confirm the repository/package relationship and review the workflow permissions before adopting it broadly.
68%
Total Score
100
100
78
80
This package is only hours old, with two releases on the same day and no longer-term release history, so maintenance durability is not yet demonstrated.
The repository name does not match the package name and its README does not mention the package, creating a meaningful risk that the linked repository is not actually the package source. The repository appears SDK-related, but the collected evidence does not establish the relationship.
The repository has zero stars, forks, and watchers. This is a caution for external validation, though it is unsurprising for a package released only hours ago and is not decisive by itself.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.