The package has a declared BSD-3-Clause license and release notes for this version, but no README for consumers. Its minimal repository lacks tests, security scanning, and a security policy, while the single workflow uses an unpinned action.
38%
Total Score
0
58
50
The package has had no releases in nearly five years; all 15 releases arrived within a very short initial period, with none in the last 12 months. This strongly indicates abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in October 2021. There is no provided evidence of ongoing maintenance.
The package uses a pre-autoload-dump install-time script. This deserves awareness because lifecycle code runs during installation, but the signal provides no evidence that the script is unsafe.
The package has a GitHub release with notes for this exact version, which documents the release. The missing README is a consumer-facing gap for a library, while missing tests and a changelog in the published artifact are normal packaging practice.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of community review or adoption. Popularity is only supporting evidence, so this reinforces rather than determines the health assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
google/apiclient Version * | — | — |
phpmailer/phpmailer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.