The MIT license, tests, README, and release notes make adoption straightforward. No commits or active maintainers were recorded in the last three months, so ongoing support remains uncertain.
67%
Total Score
50
100
86
83
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the thin maintenance base. The recent ownership transition described in the project materials makes continuity uncertain.
The package has existed since April 2014 and released version 4.0.0 in December 2025, but only one release arrived in the last 12 months and the median interval is about 479 days. This indicates slow maintenance rather than abandonment by itself.
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently, the lack of current development activity creates a meaningful support risk.
There are no open issues or pull requests, and no issue or pull-request activity was recorded in the last month. This is consistent with a quiet project but provides little evidence of active community support.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.