The repository has clear documentation, tests, an MIT license, and a GitHub release for this version. It lacks security scanning and a security policy, while its small maintainer base leaves limited support capacity.
58%
Total Score
50
50
78
75
Five runtime dependencies, including native PHP extensions and kingbes/libui, create meaningful environment and compatibility requirements for consumers.
Only one account has registry publish access. The repository is user-owned, so this is not an administrative mismatch, but it still indicates limited publishing redundancy.
Only two releases have appeared over roughly 10 months, with about 20 days between them; this is limited evidence of an established release process.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete maintenance warning for a relatively young package.
The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but these figures provide little external evidence of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kingbes/libui Version 0.1.* | — | — |
ffi/var-dumper Version 1.0.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.