Risky to adopt: the package has had no release or repository activity since April 2017, with almost no signs of a maintained user base. It is not deprecated or archived and has a usable README, but the long abandonment period makes ongoing fixes and compatibility unlikely.
42%
Total Score
0
58
75
The package has only two releases, both in April 2017, and none in the last 12 months. A release gap of more than nine years is strong evidence of abandonment, even for a small package.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's long release gap. This leaves little evidence that defects or compatibility issues will be addressed.
Neither a declared license nor a license file was found. That creates a genuine adoption and redistribution risk for an open-source dependency.
The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but these counters provide no meaningful supporting evidence of community adoption.
Composer is used for the package, which is appropriate, but no security scanning tools are present. Given the repository's inactivity, there is also no visible process for catching dependency or code issues over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.