The artifact is minimal and has no install-time scripts, so dependency behavior appears simple. Its narrow test-package shape may be intentional, but support and provenance remain difficult to verify.
30%
Total Score
50
75
This package has only one release, published over six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk and outweighs the otherwise neutral registry status.
No declared license or license file was found. Without licensing terms, legal reuse is unclear and dependency adoption carries a significant practical risk.
The package contains only composer.json and src/MyClass.php, indicating a very small and narrowly scoped artifact. That simplicity limits installation complexity but provides little evidence of maturity or maintenance depth.
The artifact has no README, which is a genuine documentation gap for consumers, although the absence of tests and a changelog is normal for a published package artifact and is not counted against it.
The assessed version is not marked as a prerelease, which avoids prerelease instability, but the v0 major version still provides limited maturity assurance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.