There is no published security policy or automated security scanning, which weakens transparency for a dependency. The package is small and focused, with a clear README, license, and minimal runtime dependency.
66%
Total Score
75
100
81
83
The repository recorded zero commits and zero active maintainers in the last three months. The same-day release and push provide some recent activity, but the lack of ongoing development lowers confidence in maintenance continuity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal and modestly reduce maturity confidence.
Composer is used as the build tool, but no security scanning tools are configured. This is a transparency and hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This weakens project transparency for adopters.
Version v0.10.1 is not a prerelease, and only 5% of recent releases are prereleases. The package remains below 1.0, so its API may still change, but the release profile is otherwise stable.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.