The package is clearly licensed, actively released, and backed by an organization, with no install-time scripts or deprecation notice. Consumer documentation is minimal, while the repository shows no recent commits and lacks a security policy or scanning tool.
62%
Total Score
75
83
75
The package includes a README, but it is only 14 characters long; absent tests and changelog files are normal packaging practice and are not gaps here.
The repository recorded zero commits and zero active maintainers in the last three months, despite the recent registry releases, leaving current development activity uncertain.
Composer is used for builds, but no security scanning tool is configured, leaving security-process coverage limited.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.