It has a small but coherent source tree, tests, release notes, and a clear MIT declaration. The repository is not archived, but recent development is absent and its workflow uses three unpinned actions.
32%
Total Score
0
100
67
75
Packagist marks the package as abandoned at package scope, with no distinct replacement identified. This is a direct warning against taking a new dependency on the release.
The latest release was published in December 2020, and there were no releases in the last 12 months despite the package being over 10 years old. That strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates no observable current maintenance to offset the stale release history.
The single analyzed workflow completed successfully with no detected dangerous findings, but all three action references are unpinned. That leaves avoidable build-integrity and maintenance hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.