The package includes tests and a matching Apache-2.0 license. Organization backing and a current repository push help, but there is no security policy and the project has little operating history.
58%
Total Score
100
79
75
The package was first released today and has four releases clustered within minutes, so there is not yet evidence of a mature or sustained release process.
The repository uses Composer, supporting a standard build path, but no security scanning tool was detected; this is a modest transparency and maintenance gap for a new package.
No repository security policy was found. This does not establish a security defect, but it leaves reporting and maintenance expectations undocumented.
Version 7.0.0.0-beta22 is explicitly a prerelease, and 75% of recent releases are prereleases, which increases change and compatibility risk for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
vimeo/psalm Version 7.0.0-beta22 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.