The stable major version and lack of install scripts make routine integration straightforward. The repository is not archived, though its lightweight setup offers little process evidence.
60%
Total Score
50
100
79
75
The artifact has no README or tests, reducing consumer documentation and verification for a package that appears to provide reusable data; the GitHub release configuration provides some project structure but no release notes for this version.
The repository is owned by an individual account rather than an organization, so the package has limited visible institutional backing.
All four releases occurred on 3 April 2025, with no releases in the following 12 months; this indicates a small, currently inactive release history.
There were no commits or active maintainers in the last three months, leaving little evidence of ongoing maintenance capacity.
Composer build tooling is present, but no security-scanning tools were detected; for this small data package that is a modest transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ajgl/csv-rfc Version ^0.4.0 | — | — |
rollun-com/rollun-utils Version ^8.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.