This is a generally healthy, actively developed release with strong package and repository hygiene: it has a clear MIT license, README, tests, changelog, substantial source and test trees, stable 1.x versioning, recent releases, and a non-archived organization-backed repository. Recent activity shows six commits by two active contributors over three months, and the repository matches and documents the package. The main reservations are very low repository adoption, absent security scanning and security policy, and GitHub Actions permission declarations that are not uniformly restrictive; these are meaningful transparency and hardening gaps, but they do not outweigh the evidence of active maintenance and reproducible project structure.
82%
Total Score
100
50
89
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
mezzio/mezzio Version ^3.27 | — | — |
psr/container Version ^1.1 || ^2.0.2 | — | — |
symfony/cache Version ^6.4 || ^7.4.8 || ^8.0 | — | — |
fakerphp/faker Version ^1.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.