The artifact has a usable README, a matching organization-owned repository, and a stable release. Its small scope and four runtime dependencies keep adoption straightforward, but the project offers little ongoing assurance.
43%
Total Score
50
100
69
75
The manifest declares a proprietary license and no license file was found. That creates a material transparency and reuse concern for an open-source dependency.
The package has had no releases in more than four years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment risk despite the repository remaining available.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This materially increases abandonment risk.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This lowers transparency, although it is less severe than the maintenance and licensing concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas-api-tools/api-tools-api-problem Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.