The package includes a substantial README, tests, MIT licensing, and only one runtime dependency. Its sole maintainer and absent security tooling leave limited evidence of ongoing care.
64%
Total Score
50
100
86
50
One registry maintainer is consistent with a small, individually backed project, but it provides limited redundancy if that maintainer becomes unavailable.
This is a young package with only one release, published 137 days ago, so there is little release history to establish long-term maintenance.
The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance.
Composer is used for the build, but no security scanning tools are present, leaving a modest supply-chain hygiene gap.
The repository has no security policy, reducing transparency about how users should report and receive fixes for security issues.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.