The repository includes tests, a README, and release notes for this version. Composer tooling and security scanning help, but the missing security policy leaves transparency thinner.
67%
Total Score
75
86
50
The manifest declares BSD-3-Clause, while the artifact license file is detected as MIT. The release is licensed, but the mismatch creates avoidable legal uncertainty.
The repository recorded zero commits and zero active maintainers in the last three months, despite a recent release. This weakens evidence of ongoing maintenance capacity.
The repository has no published security policy. This is a transparency gap, though it is less severe because automated security scanning is present.
Version 0.5.2 is not marked prerelease, and recent releases contain no prerelease versions. The 0.x major version still signals less mature API stability than a 1.x release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.