Its dependency set is substantial, while the repository has no tests, changelog, security policy, or security scanning. The MIT license, stable release status, and lack of install scripts are positives, but the project shows no activity since October 2018.
38%
Total Score
25
50
69
83
The latest release was in October 2018, with no releases in the last 12 months and a package age of about 8 years, indicating prolonged release inactivity.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release hiatus and elevated abandonment risk.
The package declares 16 runtime dependencies and no development dependencies, creating a relatively broad dependency surface without visible development tooling support.
The artifact and repository contain no tests or changelog, and the package has no README; these reduce maintenance and consumer transparency. A GitHub release exists for this version, providing limited documentation compensation.
The registry namespace and repository owner match, but the owner is an individual account and the available activity signals show no current backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version * | — | — |
psr/link Version * | — | — |
psr/cache Version * | — | — |
symfony/yaml Version ^4 | — | — |
psr/container Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.