This is a usable but still relatively immature package: it has a substantial README, source code, and integration tests in the artifact, a clear Apache-2.0 license declaration, no install-time scripts, no deprecation notice, and a modest dependency footprint. However, the package is only 180 days old, remains on the 0.x line, has released just five versions at roughly 46-day intervals, and has no declared source repository, leaving maintenance activity, contributor depth, and build transparency unverified. The single registry maintainer is only administrative evidence and cannot compensate for the missing repository signals, so adoption is reasonable with caution rather than strongly supported.
64%
Total Score
50
100
80
100
Only one registry account has publish access. This does not establish poor maintenance by itself, but with no linked repository activity available it leaves limited evidence of organizational or contributor redundancy.
The package is young at 180 days and has five releases, with a median interval of about 46 days. This shows some release activity, but the limited history provides only modest evidence of durable maintenance.
Version 0.2.3 is not a stable major release, so API compatibility and long-term maturity are less established. It is not marked as a prerelease, which partially offsets the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
tereta/dbal Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.