The single-contributor project has limited handoff capacity, and the repository has no security policy or automated security scanning. Clear licensing, tests, documentation, and a stable release line reduce adoption risk.
78%
Total Score
67
94
83
The repository owner is a user account rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated contributor activity.
One contributor made all 3 commits in the last 3 months, giving the project a fully concentrated recent commit share. That limits handoff capacity for a user-owned repository.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-process gap, not evidence of unsafe code.
The repository has no security policy. For a notification library, this weakens the documented path for reporting issues and handling security disclosures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
psr/container Version ^2.0 | — | — |
psr/http-message Version ^2.0 | — | — |
symfony/notifier Version ^7.3 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.