This release appears usable but has some meaningful transparency and continuity concerns. It has a strong recent release cadence, a stable non-prerelease version, no registry deprecation, active repository commits, an organization-owned project, a clear MIT license, and no install-time scripts or dangerous workflows. However, the artifact contains no README or tests, the repository has very low popularity, commit activity is highly concentrated in one of two contributors, no security policy is present, and the linked repository does not clearly match or mention the package. These issues do not indicate abandonment, but they warrant caution before adopting it as a critical dependency.
72%
Total Score
88
100
78
83
The artifact lacks a README, tests, and changelog, which reduces release transparency, but repository tests are present and compensate for the missing packaged tests.
One contributor made 46 of 47 recent commits, creating a significant concentration risk. The second active contributor and organization ownership partially compensate, but maintenance remains highly dependent on one person.
The repository name does not match the package name and the README mention is unknown, so the linkage between this registry package and its source repository is not clearly established.
The repository has only 1 star, 0 forks, and 0 watchers. Low popularity is supporting caution rather than a verdict, since active maintenance is shown elsewhere.
Composer build tooling is present, but no security scanning tools are configured, leaving a security-process gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^7.3|^8.0 | — | — |
tempest/support Version 3.19.2 | — | — |
tempest/container Version 3.19.2 | — | — |
tempest/http-client Version 3.19.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.