The package includes tests, an Apache-2.0 license, and no install-time scripts. Its very recent launch leaves little evidence of sustained maintenance, while the missing README and security policy reduce transparency.
64%
Total Score
75
100
71
88
Tests are present in both the package and repository, which is a positive quality signal. The artifact has no README, leaving consumer documentation thinner than ideal for a library package.
This package has only one release and is less than one day old, so there is not yet enough release history to demonstrate sustained maintenance or stability.
The repository has no commits in the last three months and no active maintainers, but it was created less than one day ago; this is currently a lack of demonstrated history rather than evidence of a collapsed project.
Composer is used as the build tool, which fits the package, but no security-scanning tooling was detected, leaving a modest repository-hygiene gap.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.