The last registry release was over three years ago, and no commits or active maintainers were recorded in the past three months. The package has tests, a useful README, release notes for this version, a declared MIT license, and no install-time scripts.
65%
Total Score
50
100
88
75
The registry and repository are owned by the same individual account, so the package has clear ownership but no organization backing to offset its single-owner maintenance profile.
The latest release was on January 5, 2023, with no releases in the last 12 months; this indicates a long period without published updates and raises abandonment concern.
No commits and no active maintainers were recorded in the past three months. This weakens evidence of ongoing maintenance and compounds the old registry release history.
There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This offers little evidence of active project development.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.