This release appears healthy and suitable for dependency use: it is actively maintained, with 81 releases in the last 12 months, a stable non-prerelease version, recent repository activity, and an unarchived organization-owned repository. The artifact is licensed under MIT, contains a complete source tree, and its missing packaged tests are compensated by a repository test suite. The main concerns are a highly concentrated contributor base, no detected security scanning or security policy, and no repository popularity signals; these reduce resilience and transparency but do not outweigh the strong release and maintenance evidence.
82%
Total Score
88
100
83
90
The artifact lacks a README, tests, and changelog, but the linked repository contains tests, which compensates for the missing packaged tests. The absent changelog and README remain minor transparency gaps.
Two contributors were active, but the top contributor made 45 of 49 commits, or about 92%, creating substantial concentration risk. Organization ownership provides some ability to hand maintenance off, but the observed activity remains heavily dependent on one contributor.
The repository reports zero stars, forks, and watchers, providing no supporting popularity evidence. Popularity is only secondary evidence, so this is a caution rather than a severe health concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap despite the active development record.
The repository has no security policy, reducing disclosure transparency and documented security-process maturity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.3|^8.0 | — | — |
tempest/core Version 3.19.2 | — | — |
tempest/support Version 3.19.2 | — | — |
tempest/container Version 3.19.2 | — | — |
doctrine/inflector Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.