Tests, an MIT license, and release notes provide some useful transparency. However, this is a one-release 0.0.0 package with no commits or releases since 2017, making maintenance and compatibility uncertain.
38%
Total Score
50
67
50
Only one release exists, published over 10 years ago, with no releases in the last 12 months; this is strong evidence of an immature and inactive package.
There were no commits and no active maintainers in the last three months, consistent with a project that is no longer being maintained.
Five issues remain open, while there were no new or closed issues and no pull-request activity in the last month, indicating unresolved maintenance demand.
The repository is not archived, which is a modest positive, but its last push was in March 2017 and does not offset the long inactivity shown elsewhere.
No security policy is present, leaving vulnerability-reporting expectations unclear; this is a hygiene gap, though the package's much older inactivity is the larger concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/behat Version ^3.0 | — | — |
ayeaye/formatters Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.