The repository has tests and remains under its owning organization. No license is present, and there has been no recorded commit or release activity for about four months, while the 0.x version signals limited maturity.
55%
Total Score
50
67
The repository recorded zero commits and zero active maintainers over the last three months, which is meaningful abandonment risk for a young package.
No license declaration or license file was found in the package or repository, leaving the terms for using this dependency unclear.
The package is young at about 172 days old, with five releases, but the latest release was about four months ago, indicating a recent maintenance pause.
The repository name does not match the package name, and no README mention was available to confirm the mapping. Shared organization ownership reduces the concern, but the package-to-repository relationship remains less transparent.
Version v0.4 is not a stable major release, so its API and behavior may still change even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
yiisoft/di Version ^1.0 | — | — |
yiisoft/json Version ^1.0 | — | — |
psr/container Version ^2.0 | — | — |
yiisoft/files Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.