The small codebase includes a README and release notes, while Composer tooling and GitGuardian add useful structure. Limited ownership and weak package-to-repository identification make long-term support and provenance less clear.
44%
Total Score
25
57
75
No license declaration, license file, or detected repository license was found, leaving the legal terms for using this package unclear.
The package has had no release in roughly 1 year 9 months; eight releases were clustered near its initial publication, which is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, despite not being archived, indicating currently weak observable development activity.
Only one registry publishing maintainer is listed, leaving little visible publishing continuity if that person becomes unavailable.
The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that the repository is the package's source.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.