The package has a clear README, a matching repository, and release notes for v1.0.0. Its single release is about two years old, with no recent commits, tests, security scanning, or license, leaving maintenance and adoption risks.
55%
Total Score
67
81
83
No license declaration or license file was found, so the legal terms for using this package are unclear.
The registry has one maintainer account, but the repository is organization-owned, which provides some backing context. The small publishing base still offers limited redundancy.
There has been only one release, published about two years ago, with no releases in the last 12 months. This provides little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence that defects or compatibility issues will be addressed promptly.
Composer build tooling is present, but no security-scanning tools were detected, leaving an avoidable transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.