The package includes tests, a changelog, a release note, and clear licensing. Its young repository has had no commits or maintainer activity for three months and has no security policy or scanning, making future fixes less certain.
62%
Total Score
50
81
75
The package has 7 releases in its first 83 days, but all were published on the same day, showing an initial burst rather than established release continuity.
There were 0 commits and 0 active maintainers in the past three months, which is a meaningful maintenance concern for a package released only 83 days ago.
There were no new or closed issues and no new or merged pull requests in the past month, consistent with the lack of recent commit activity.
The repository has 0 stars, forks, and watchers. This is weak supporting evidence, though the project's young age limits how strongly it should be weighed.
Composer is used for builds, but no security scanning tools are configured, leaving a notable transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mongodb/mongodb Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.