The package includes tests, a usable README, bounded dependencies, and security scanning. Its longer-term reliability is not yet established, and maintenance is concentrated in one contributor despite organization backing.
68%
Total Score
67
100
94
83
The package is 0 days old with only 2 releases, both published on the same day, so there is no established release track record yet.
All 3-month commit activity comes from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.
There were 2 commits in the last 3 months, showing recent activity, but the small volume leaves maintenance continuity uncertain.
The repository has no security policy, leaving disclosure and response expectations undocumented. This is a modest transparency gap rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version ^8.1 | — | — |
symfony/http-client Version ^8.1 | — | — |
survos/followthemoney Version ^2.31 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.