The beta status and three-month pause in commits leave less evidence of stability. Its documentation, tests, licensing, and recent release are reassuring, while workflow references are unpinned.
68%
Total Score
75
50
88
50
The package has 11 runtime dependencies, including a PHP extension and asynchronous process and networking libraries. This adds integration and update surface but is consistent with its browser-automation role.
Post-install and post-update scripts run during dependency operations. That is a supply-chain and reproducibility consideration, although it may be expected for this browser-installing package.
The repository recorded zero commits and zero active maintainers in the last three months. A fresh release and recent push provide some compensation, but the current maintenance pause remains a concern.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of abandonment.
The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself show that the release is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
amphp/amp Version ^3.1 | — | — |
amphp/file Version ^4.0 | — | — |
amphp/process Version ^2.1 | — | — |
symfony/console Version ^7.4|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.