The package is small and has only one runtime dependency, keeping integration and supply-chain complexity low. Its stable version and MIT license help, but the minimal documentation and lack of security policy leave little guidance for long-term use.
43%
Total Score
50
100
72
83
The latest release was published in June 2018, with no releases in the following 12 months and no evidence of recent maintenance. This is a substantial abandonment risk despite the package not being marked deprecated.
A README is present, but it contains only 17 characters and provides almost no usage guidance. The absence of packaged tests and a changelog is normal for an artifact and is not counted against it.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it offers no evidence of ongoing community maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counters provide little evidence of an active user or contributor community.
Composer is used as the build tool, but no security-scanning tooling is present. For a small, long-stale package this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.