Its Apache-2.0 licensing, matching repository, and organization backing improve transparency. The small metapackage has no install scripts, but there is not yet enough history to establish durable maintenance.
62%
Total Score
75
100
88
88
This release is the package's first and only release, published 0 days ago, so there is no release history to demonstrate continuity or stability.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is newly published, this may reflect its age, but it still leaves maintenance capacity unproven.
Composer is used as the build tool, which fits the package, but no security-scanning tooling was detected; this is a minor transparency gap for a package with very little history.
The repository has no security policy. For a tiny type-definition metapackage this is a limited gap, but it provides no documented route for reporting security issues.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/league-uri-interfaces-impl Version ~7.8.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.