The package has tests, a matching Apache-2.0 license, and organization backing. Its missing README and absent security policy leave useful documentation and maintenance safeguards to verify before adoption.
68%
Total Score
75
100
69
83
The artifact includes tests and the repository also reports tests, which supports basic project maturity. The package has no README, leaving consumers without in-package usage guidance.
This is the first release, published today, so there is no release cadence or history demonstrating sustained maintenance. Its zero-day age makes the absence of activity inconclusive rather than evidence of abandonment.
There have been no commits in the last three months and no active maintainers reported. Because the repository is only days—or effectively hours—old, this reflects limited history rather than a demonstrated collapse in maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but the package was created today and popularity is not decisive for a small focused package.
Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools are reported. That is a modest repository-hygiene gap, not a standalone supply-chain verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.