Ambil dan posting artikel dari RSS
62%
Total Score
caution
A single release and no observed commits leave this otherwise well-packaged library's maintenance unproven.
This is the package's first and only release, published 0 days ago, so there is not yet enough release history to demonstrate sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is 0 days old, this is not proof of abandonment, but it leaves ongoing maintenance unestablished.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any traction provides no independent confidence for this new package.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured, leaving a modest repository-hygiene gap.
The repository has no security policy. For a small new library this is a transparency gap rather than a severe dependency risk, but it provides no documented vulnerability-reporting path.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.