The small codebase is licensed, tested, and documented with release notes for this version. Its one-person project has had no release in over two years and no recent commits, making future fixes uncertain.
58%
Total Score
50
100
86
83
Only one account has registry publishing access. The repository is also user-owned rather than organization-backed, so there is limited visible publishing and ownership redundancy.
The package has 7 releases, but its latest release was over two years ago and it has had 0 releases in the last 12 months. That materially raises maintenance and abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the stale release history and increasing the risk that defects will remain unfixed.
Composer build tooling is present, but no security scanning tools were detected. For this small library that is a modest transparency gap rather than a severe dependency risk.
The repository has no security policy. This makes vulnerability reporting less transparent, although the package's small dependency profile partly limits the concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.