The README clearly explains the metapackage, its companion dependency, and ownership process. Licensing, repository matching, and no install scripts are reassuring, while security coverage is minimal.
68%
Total Score
75
100
86
75
This release is the package's first and only release, published 0 days ago, so there is no historical cadence or evidence of sustained maintenance yet.
The repository shows 0 commits and 0 active maintainers in the last 3 months. Because the package is 0 days old, this is mainly a lack of demonstrated history rather than evidence of abandonment.
Composer is used as the build tool, appropriate for this package, but no security scanning tools are configured, leaving a modest transparency gap.
The repository has no security policy. This is a hygiene gap for reporting vulnerabilities, though the tiny metapackage has limited executable surface.
No GitHub Actions workflows were present, so there are no workflow risks to flag; this also provides no automated build or security assurance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/behat-behat-impl Version ~3.33.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.