The Apache-2.0 licensing and Composer setup are clear, and the repository is not archived. Zero stars and no security policy provide little additional maturity evidence, so pin this exact version until the project establishes a track record.
68%
Total Score
75
70
50
The artifact contains tests but no README. For a type-definition library, the missing consumer documentation is a modest transparency and integration gap.
The package was released today and has only one release, so there is not yet enough history to demonstrate sustained maintenance or reliable release practice.
The repository recorded 0 commits and 0 active maintainers over the past 3 months. Because the package is newly created, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity untested.
Composer is used for the build, which is appropriate, but no security-scanning tool was detected. This is a minor supply-chain hygiene gap rather than a severe risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The small, newly created project limits the significance of this gap, but it provides no compensating process evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.