The package includes tests, a matching Apache-2.0 license, and no install-time scripts or deprecation notice. It is too new to demonstrate sustained maintenance, and the repository has no security scanning or security policy.
76%
Total Score
75
100
81
88
This is the first release, published today, so there is no release track record or demonstrated cadence yet. The lack of history limits maturity evidence but is not abandonment evidence for a package that is 0 days old.
There were zero commits and zero active maintainers in the last three months, but the repository was created or updated today. This provides no maintenance track record yet, rather than evidence that an established project has stopped.
Composer is used as the build tool, which fits the ecosystem. No security scanning tools are configured, leaving a modest repository-hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. This is a hygiene concern for a new, small package, not a severe risk on its own.
Version 0.1 is an early, non-stable-major release, which signals that APIs may still change. It is not marked as a prerelease, providing a small compensating indication that the publisher treats it as a usable release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.