This release is well-scaffolded and transparent for a small PHP library: it has an MIT license, complete README, changelog, tests in both the artifact and repository, a focused dependency profile, no install-time scripts, a matching repository, and safe analyzed workflow patterns. However, the package is only 1 day old with four releases clustered within roughly 5 hours, so long-term stability and maintenance capacity are unproven; repository commit activity also reports no commits or active maintainers over the last 3 months, while repository security scanning and a security policy are absent and four workflows grant top-level write permissions. It is potentially usable, but adoption should be cautious until sustained maintenance and release practices are demonstrated.
62%
Total Score
63
100
78
80
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.