It has a tested, documented codebase, MIT licensing, organization backing, and a published security policy. Its small community footprint and lack of security scanning provide less evidence of ongoing support.
45%
Total Score
67
81
100
The latest release was about 9 years ago, with no releases in the past 12 months. Sixteen historical releases show the project was once active, but the prolonged pause is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers over the past 3 months, consistent with the last push being about 9 years ago. This leaves little evidence of current maintenance.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and hygiene gap, though it does not outweigh the stronger evidence about maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bbc/ipr-cache Version ^1.0 | — | — |
doctrine/cache Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.1 | — | — |
solution10/circuitbreaker Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.