The package has one registry maintainer, no security-scanning tools, and very little repository adoption. It is licensed, documented, non-deprecated, and recently released, which partly offsets the thin maintenance evidence.
60%
Total Score
50
81
75
The repository is owned by an individual account rather than an organization. That provides less visible backing capacity, although the package and repository owners match.
The package is about 670 days old and has 27 releases, but only 2 releases in the last 12 months. The latest release is recent, so this indicates slowing maintenance rather than abandonment.
There were 0 commits and 0 active maintainers in the last 3 months. The repository was pushed on the latest release date, which partly offsets but does not remove the concern about ongoing maintenance.
The repository has 1 star, 0 forks, and 1 watcher, showing very limited independent adoption. Popularity is supporting evidence, but this is a meaningful sign of a small project.
The repository uses Composer, but no security-scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.