Lightweight, framework-agnostic currency converter (fixed-scale decimal, PHP 8.3+).
61%
Total Score
100
75
75
The package is 335 days old but has only one release, with no evidence of an established release cadence. That limits confidence in ongoing maintenance.
The repository has zero stars, forks, and watchers, providing no external adoption or review evidence. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.
Composer is used as the build tool, but no security scanning tools are configured. For a small package this is a meaningful, though not severe, transparency and maintenance gap.
The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, although the package's small scope reduces the practical impact.
Version 0.0.1 is not a stable major release, so its API and behavior may still change significantly. It is not marked as a prerelease, which partly offsets the concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.