Healthy and actively maintained, with clear licensing and strong release activity. The main caveat is that all recent commits come from one maintainer, alongside broad workflow write permissions and no security policy.
78%
Total Score
75
100
83
63
Install and update lifecycle scripts are present, including post-install, post-update, and pre-autoload-dump hooks; these increase install-time behavior and warrant review before adoption.
The repository is owned by the same individual namespace as the package, so the registry and source ownership are consistent, but there is no organizational backing to offset the single-maintainer concentration.
All 64 recent commits came from one contributor, so maintenance depends heavily on a single individual and has limited handoff resilience.
The repository has zero stars and forks and one watcher, offering little community adoption evidence; popularity is supporting evidence, so this is a modest concern rather than a health verdict.
The repository uses Make and Composer build tooling, but no security-scanning tools were detected, leaving a security-process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.