Apache-2.0 licensing, a matching repository, and organization backing make the package transparent. Its small metapackage design keeps the artifact simple, but durable maintenance is not yet established.
72%
Total Score
75
100
88
88
This is the first and only release, published today, so the package has no track record for release reliability or long-term maintenance.
No commits or active maintainers were recorded in the last three months; because the repository was created today, this shows limited history rather than established abandonment, but maintenance capacity remains unproven.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/nunomaduro-collision-impl Version ~8.9.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.