The package is small, clearly licensed, and includes a useful README and release notes. It has no security policy or automated security scanning, so ongoing assurance is limited.
70%
Total Score
50
100
88
83
Only three releases have been published since December 2021, with a median interval of about 767 days; one release in the last 12 months and a recent latest release partly offset the sparse cadence.
There were no commits and no active maintainers in the preceding three months; the push on the latest release date provides some compensation but not evidence of sustained activity.
Composer is used for builds, but no security-scanning tooling is present, leaving a modest assurance gap for a package intended to run in developer tooling workflows.
The repository has no security policy, reducing transparency about how vulnerability reports are handled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.