It has a clear MIT license, README, tests, changelog, and a matching source repository. The small user base, absent security scanning, and unpinned workflow actions leave some maintenance and build-hygiene risk.
70%
Total Score
50
100
78
83
One registry publishing maintainer is consistent with the individually owned repository, but it also indicates a limited publishing bus factor.
The registry namespace and repository are owned by the same individual, so ownership is consistent, although there is no organization backing to broaden maintainer capacity.
The package has existed since March 2019 and published two releases in the last 12 months, including the assessed version, although its median release interval is about 3.4 years.
There were no commits and no active maintainers in the last 3 months, indicating a current maintenance slowdown; this is partly offset by the recent release but still raises abandonment risk.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is consistent with a quiet small project but provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
graylog2/gelf-php Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.