The repository is organization-owned, matches the package, and includes tests with a clear Apache-2.0 license. Composer metadata is simple and has no install scripts, but maintenance history and security processes are not yet established.
60%
Total Score
75
100
88
75
The package was published today and has only one release, so there is no track record for maintenance or release reliability yet.
There were zero commits and zero active maintainers in the last three months, though this is partly explained by the package being published today; the lack of an established history remains a caution.
The repository uses Composer, matching the package ecosystem, but no security scanning tools were detected, leaving security-process coverage limited.
The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/fractal Version 0.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.