The package includes tests, a matching source repository, and a clear Apache-2.0 license. Its limited documentation and security process leave consumers with less guidance and assurance. Maintenance capacity is not yet demonstrated.
65%
Total Score
75
100
72
83
The artifact and repository include tests, which supports basic project maturity. The package has no README or changelog, leaving consumer guidance and release context thin for a type-definition package.
This is the first release, published 0 days ago, so there is no release cadence or track record yet; its very recent age makes this an uncertainty rather than abandonment evidence.
There were no commits or active maintainers in the last 3 months, but the repository was created and pushed 0 days ago, so this reflects limited history rather than a demonstrated collapse.
The repository has zero stars, forks, and watchers. Because the project is 0 days old, these counters mainly show that community uptake has not yet been demonstrated.
Composer is used as the build tool, supporting reproducible project handling, but no security-scanning tooling is present, leaving a modest process gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.