Usable with caveats: it is a young, explicitly experimental extension with all recent commits coming from one contributor. The repository is active, backed by the Zenstruck organization, tested in the source tree, licensed under MIT, and not deprecated or archived.
72%
Total Score
83
100
71
100
The release includes a README, and the source repository has tests, which supports consumer understanding and project quality. The README's explicit experimental warning is a real compatibility concern, while the missing packaged tests and changelog are normal for a published artifact.
The package is only 50 days old, but it already has 7 releases, including 5 in the last 12 months and a median interval of about 10 days. This shows active early development, though it provides limited evidence of long-term stability.
All 5 recent commits came from one contributor, leaving no demonstrated contributor redundancy. Organization backing partly compensates for this concentration, but the package still has limited visible maintenance depth.
Composer is used for the build, providing expected packaging tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a direct health failure.
Version v2.13.0 is a stable, non-prerelease major version, with no recent prerelease releases. That is positive, although the README identifies the package as experimental and outside the backward-compatibility promise.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/behat Version ^3.22 | — | — |
symfony/config Version ^6.4|^7.0 | — | — |
symfony/string Version ^6.4|^7.0 | — | — |
zenstruck/assert Version ^1.4 | — | — |
zenstruck/foundry Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.