Extensive tests, release notes, and a matching repository provide useful transparency. The young 0.1.0 project has a limited track record and lacks a published security policy.
64%
Total Score
50
81
75
Only two releases exist across 472 days, with one release in the last 12 months and a median interval of about 155 days. This indicates a small and relatively slow project track record.
The repository recorded zero commits and zero active maintainers in the last three months. For a young package, that is a meaningful maintenance and abandonment concern.
Composer build tooling is present, but no security scanning tools were detected. That reduces transparency around dependency and code-risk checks.
The repository has no security policy. This is a transparency gap for a protocol library that may be used in security-sensitive networking code.
Version 0.1.0 is not a stable major release, which signals limited maturity even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tourze/arrayable Version 1.* | — | — |
tourze/enum-extra Version 1.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.