The project is small and offers limited consumer-facing documentation. Its simple dependency profile and matching repository provide some reassurance, but there is no evidence of ongoing maintenance.
39%
Total Score
50
100
75
75
This package has made only one release, over seven years ago, with no releases in the last 12 months. That strongly raises abandonment risk, with no later release activity to compensate.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since its initial release. The repository is not archived, but that does not demonstrate current maintenance.
The repository has only 4 stars, 0 forks, and 2 watchers, providing little independent evidence of adoption or a broader support base. Low popularity alone is not disqualifying for a small package, so this is supporting caution rather than the main concern.
Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.
The linked repository has no security policy. This is a transparency gap, although the package's small scope and lack of other collected security findings keep it from being a severe risk on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.