The package has a clear Apache-2.0 license, tests, organization backing, and no install-time scripts. Its repository is minimally established, so wait for more release and maintenance history before making it a core dependency.
66%
Total Score
75
100
81
100
The artifact includes tests, which is a positive quality signal. It has no README or changelog, but the absence of a changelog is normal for a newly published implementation artifact and the missing README is a minor documentation gap.
This is the first release, published today, so there is no historical release cadence or track record yet; its age makes that gap expected rather than evidence of abandonment.
There were zero commits and zero active maintainers in the last three months, but the repository was created and pushed today, so this reflects limited history rather than confirmed abandonment.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tool was detected, leaving a modest repository-hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nunomaduro/collision Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.