The missing license and security policy reduce transparency, while repository tests and organizational ownership provide useful support. The package is stable and clearly linked to its source, but ongoing maintenance appears limited.
58%
Total Score
75
81
75
No declared license or license file was found in the package or repository. This creates a real legal and transparency concern for adoption.
The package has 7 releases since July 2021, but none in the last 12 months; its latest release was about 16 months ago. This indicates a meaningful maintenance slowdown, though the release history is not otherwise erratic.
There were no commits from active maintainers in the last 3 months. Combined with the quiet release history, this raises concern about ongoing maintenance.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning coverage is a modest repository hygiene gap rather than evidence of a defective release.
The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for adopters.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.