The MIT license and single PHP runtime dependency make the package easy to inspect and constrain. It lacks a security policy and has no workflow automation, leaving little evidence of ongoing project hygiene.
32%
Total Score
100
50
67
This package has only one release, published 11 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository name does not match the package name and its README does not mention the package, so the linked repository may not actually document or maintain this package.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of active adoption or community support.
The repository is not archived, which is a compensating signal, but its last push was in 2016 and does not offset the long release gap.
No security policy is present in the linked repository, reducing transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.