The package is licensed, tested, documented, and has no install scripts or deprecation notice. Its small runtime footprint and organization-backed repository reduce adoption friction, but do not offset the long maintenance gap.
42%
Total Score
50
100
75
75
The latest release was published in March 2015, with no releases in the last 12 months. Six releases show some historical activity, but the long period without a release materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release silence. No provided maintenance signal compensates for this inactivity.
There were no new issues, pull requests, or merges in the last month, and no pull requests were open. This supports the conclusion that the project is inactive, although the missing open-issue count limits the evidence slightly.
The project uses Make, Composer, and Phing, which supports repeatable builds, but it reports no security-scanning tools. The build tooling is a positive offset while the missing scanning is a minor hygiene concern.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented. This is a transparency gap, though it is secondary to the stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.