Its Apache-2.0 license, focused dependency, and matching organization repository make its purpose and provenance clear. Maintenance capacity is not yet demonstrated, so pinning this release deserves care.
74%
Total Score
75
100
86
88
The package was released today and has only one release, so there is no established release cadence or maintenance track record yet.
There were no commits or active maintainers in the last three months, but the repository was pushed today and the package itself is only one day old, so this is limited evidence rather than abandonment.
Composer is used as the build tool, but no security scanning tool was detected. This is a modest repository-hygiene gap, not a dependency-health failure for this small package.
The repository has no security policy. That reduces disclosure transparency, though the package is a small type-definition metapackage with no install lifecycle scripts.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/league-fractal-impl Version ~0.21.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.