Usable with caveats: the package is licensed, documented, stable, and backed by a matching active repository, but maintenance appears paused since May 2024. The small project has no recent commits, no security policy, and limited repository adoption signals.
60%
Total Score
75
100
79
75
The package has seven releases, but none in the last 12 months and the latest release was over two years ago, which raises maintenance and abandonment concerns.
There were no commits and no active maintainers in the last three months; combined with the old latest release, this is the strongest evidence of paused maintenance.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was over two years ago, so the unarchived status does not offset the stale activity completely.
No repository security policy was found, which weakens vulnerability-reporting transparency for a package intended to be integrated into applications.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
alex-kalanis/kw_input Version >=3.0 <4 | — | — |
alex-kalanis/kw_paths Version >=4.0 <5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.