It has a stable 1.0.1 release, an MIT declaration, and a minimal dependency footprint. The linked repository is intact and its README mentions the package, supporting that it is the genuine source.
60%
Total Score
50
100
83
83
The package and repository are tied to the same individual owner, providing clear ownership but no organizational backing to offset the thin maintainer base.
The package has six releases since 2016, but none in the last 12 months; its latest release was about 18 months ago, which raises maintenance concerns.
There were no commits and no active maintainers in the last 3 months, consistent with the broader release slowdown and increasing abandonment risk.
The repository has one star, one fork, and no watchers; this provides little community validation, though low popularity alone is not a decisive health problem.
Composer is used for builds, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.