The package is small, clearly identified, licensed, and backed by an organization with repository tests. Workflow pinning and security-policy gaps add hygiene concerns, while the available activity data gives limited evidence of ongoing maintenance.
65%
Total Score
75
50
88
75
The package has six runtime dependencies, including related Aeon components and PSR Cache; this is a meaningful dependency surface but not unusually large for a library of this scope.
The package has existed since 2020 with 12 releases, but only one release in the last 12 months; this suggests a modest and slowing release cadence rather than abandonment by itself.
No commits and no active maintainers were recorded in the last three months. Combined with the single release in the last year, this is evidence of currently quiet maintenance.
The repository uses Composer, but no security-scanning tools were detected. That is a maintenance and transparency gap, though it is not severe on its own.
No security policy was found, leaving vulnerability-reporting expectations unclear for a library that may be used in applications.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ~1.0|~2.0|~3.0 | — | — |
aeon-php/sleep Version ~1.0 | — | — |
aeon-php/calendar Version ~1.0 | — | — |
symfony/polyfill-mbstring Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.