Documentation, licensing, and repository structure are solid. Limited recent activity and workflow safeguards leave meaningful maintenance and publishing concerns.
58%
Total Score
67
100
89
67
A post-autoload-dump install script adds some execution-time supply-chain exposure, though this signal alone does not show harmful behavior.
The package is about 18 months old with nine releases, but only one release appeared in the last 12 months, indicating a slow recent cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has recently stalled.
There are no open issues, but four pull requests remain open and none were merged in the last month, suggesting limited review throughput.
The repository has zero stars, forks, and watchers, offering little independent evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.