The included tests and usage documentation support practical integration. This first release has no maintenance history yet, and no license is declared, so long-term dependency risk remains significant.
55%
Total Score
50
100
81
75
No declared license, recognized license text, or license file was found in the package or repository. This is a real adoption and redistribution concern.
This package is brand new: it has one release and is 0 days old, so there is no release track record or evidence of sustained maintenance.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the package being newly published but leaving maintenance capacity unproven.
Composer build tooling is present, but no security scanning tools were detected. For this small first release, the missing scanning is a modest transparency gap rather than a severe risk.
The repository has no security policy, reducing disclosure transparency for a client that handles API credentials, although no active vulnerability is shown by this signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.