It includes tests, an Apache-2.0 license, and no install-time scripts. The organization-backed repository is not archived, but there is little evidence yet of established adoption.
58%
Total Score
75
100
79
75
This is the package's first release, published today, with only one release recorded. That is expected for a new project but provides no history to demonstrate sustained maintenance.
The repository shows 0 commits and 0 active maintainers over the last three months. Because the package is only hours old, this is limited evidence rather than proof of abandonment, but maintenance capacity remains unproven.
Composer is used as a build tool, which fits the package ecosystem. No security scanning tooling is reported, a modest hygiene gap for a project with otherwise limited maturity evidence.
The repository has no security policy. For a small, newly published type-definition package this is a minor transparency gap, not evidence that the package is unsafe to depend on.
Version 0.1 is not a stable major release, so compatibility and API maturity are not yet established. It is not marked as a prerelease, which provides only limited compensation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.