Clear licensing, documentation, tests, and a security policy make integration easier. Recent releases show ongoing work, but all four recent commits came from one contributor, so continuity depends heavily on that person.
82%
Total Score
67
94
100
One contributor made all four commits in the last three months, creating a narrow recent maintenance base. Organization backing provides some handoff capacity, but the observed activity still depends on one person.
The repository recorded four commits in the last three months, showing recent maintenance. However, the activity is limited and concentrated in one contributor.
The project uses Make and Composer, which supports repeatable builds, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^7.1.1 | — | — |
teknoo/recipe Version ^7.2.2 | — | — |
teknoo/states Version ^7.1.5 | — | — |
teknoo/immutable Version ^3.0.22 | — | — |
teknoo/east-common Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.