The package is clearly scoped, documented, licensed, and has no install-time scripts. Organizational backing and release notes improve transparency, while the small tooling surface limits what repository tests can demonstrate.
72%
Total Score
88
100
88
100
One contributor made 100% of recent commits, leaving a low practical bus factor despite the organization-owned repository.
Composer is used for builds, but no security-scanning tool was detected. This is a hygiene gap rather than evidence of abandonment, especially for a configuration-only package.
This release is still a beta and 90% of recent releases are prereleases, so the API and behavior may still change for consumers.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.