The package includes a clear license, useful documentation, and repository tests. Its single-user ownership and absent security policy provide limited ongoing assurance for a dependency this old.
40%
Total Score
33
81
75
The latest release was published in April 2015, and there were no releases in the last 12 months. This long release gap is strong evidence of abandonment risk despite the eight historical releases.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push being in 2018. This materially increases the chance that defects and compatibility changes will go unattended.
Only one registry account, alxmsl, has publish access. That is a thin publishing base, although the repository and registry namespace identify the same individual, so it is a modest rather than decisive concern.
The repository is owned by the same individual as the registry namespace, but the owner type is User rather than Organization. This confirms ownership alignment without providing organizational maintenance capacity.
Composer is used as a build tool, which is appropriate for this PHP package, but no security scanning tools were detected. The missing scanning is a hygiene gap that adds some uncertainty to an already inactive project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.