The project is newly published, so its longer-term maintenance record is unproven. One maintainer, no repository security policy, and four unpinned workflow actions add modest risk, while tests, release notes, licensing, and readme documentation are present.
64%
Total Score
50
100
88
67
Only one registry account has publish access. The linked repository is user-owned, so there is no organizational backing shown to compensate for the narrow maintainer base.
The registry namespace and repository are owned by the same individual, confirming source ownership but not providing broader organizational backing.
This is the first release and was published today, so there is no established release cadence or track record yet. That is a maturity concern, though it is expected for a new project rather than evidence of abandonment.
No commits or active maintainers were recorded in the preceding three months, but the repository was created and released today, making this a limited history rather than clear abandonment.
Composer build tooling is present, but no security scanning tools were detected. For a newly published rules engine, this leaves a useful but incomplete verification and security-maintenance picture.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-intl-normalizer Version ^1.42 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.