The package includes tests, a substantial README, a matching repository, and release notes for this version. Its single maintainer, no commits in the past three months, absent security scanning, and install-time scripts warrant caution.
58%
Total Score
50
100
78
67
The package runs post-install and post-update Composer scripts, which increase installation complexity and require extra trust in publisher-controlled installation behavior.
Only one account has registry publish access, leaving little publishing redundancy even though this does not by itself show project abandonment.
The package is about 16 months old with six releases and two releases in the last 12 months, showing real release history but limited recent cadence.
The repository had zero commits and zero active maintainers in the past three months; together with the last push in December 2025, this indicates a prolonged maintenance gap.
The repository has zero stars and forks and only two watchers, providing little external adoption evidence, though popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.