The README, GitHub release, and small runtime dependency set provide useful transparency. The project is still an alpha with one release, one active contributor, no repository tests, and no security policy.
60%
Total Score
75
100
75
75
The package is 133 days old but has only one release, so its maintenance and release track record are still unproven.
All 11 recent commits came from one contributor, leaving maintenance highly dependent on a single person.
Composer is used for builds, but no security-scanning tools are reported, leaving an avoidable review gap for a framework handling authentication and databases.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
v1.0.0-alpha is a prerelease, and all recent releases are prereleases, indicating API and behavior may still change materially.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.