It includes tests, a matching Apache-2.0 license, and no install-time scripts. Its small dependency surface suits a type-definition package, but security scanning is absent.
68%
Total Score
75
100
71
75
This is the first release, published today, so there is no release history to demonstrate sustained maintenance or maturity. The package's age is too short to prove abandonment.
There were no commits and no active maintainers in the last three months. Because the repository and release are both brand new, this is limited evidence of maintenance capacity rather than proof of abandonment.
The repository has zero stars, forks, and watchers, so there is no community adoption signal to compensate for the very limited release and activity history. Low popularity alone is not a severe concern for a small specialized package.
The repository uses Composer, which fits the package ecosystem, but no security-scanning tools are configured. The missing scanning is a modest transparency and hygiene gap.
The repository has no security policy. For a small type-definition package this is a minor governance gap, not evidence that the package is unsafe or unmaintained.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.