The small repository has tests, a README, and an MIT license. Its single maintainer and missing security policy add little resilience for a package that has seen no updates for years.
43%
Total Score
25
79
75
Only two releases were published, both in June 2020, with no releases in the last five years. This is strong evidence of abandonment despite the package not being deprecated.
The repository recorded no commits and no active maintainers in the last three months, while its last push was in July 2021. The existing tests do not offset the prolonged lack of maintenance.
The registry lists one maintainer, which limits continuity and bus factor for an already inactive package. The linked repository is user-owned rather than organization-backed.
The repository has zero stars and forks and one watcher, providing little supporting evidence of broad review or community maintenance. Low popularity alone is not decisive for a small package.
No security policy was found in the repository. This is a transparency and response-readiness gap, though it is secondary to the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-ds/php-ds Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.