The package has a clear MIT license, a README, and no install-time scripts. Its very small three-file shape and lack of security tooling provide limited evidence of ongoing project care.
43%
Total Score
25
75
75
All six releases were published within hours on February 11, 2020, and there have been no releases in over six years. This strongly increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since 2020.
There was no issue or pull request activity in the last month. This supports the picture of an inactive project, though it is weaker evidence than the release and commit history.
The repository has zero stars and forks and one watcher, offering little community evidence to compensate for the inactive maintenance history.
Composer is used for builds, which is appropriate, but no security scanning tools were detected. That leaves dependency and code risks less visibly managed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.