Usable with caveats: the package is licensed, tested, stable, and backed by a matching repository, but it has had no release or commit activity for about 12 years. Depend on it only if its old PHP behavior is acceptable and you can maintain it yourself.
52%
Total Score
0
100
79
100
The package has only two releases, with the latest published about 12 years ago and none in the last 12 months. That strongly raises abandonment and compatibility risk, although the package may be intentionally stable.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long absence of releases. There is no provided evidence of ongoing maintenance capacity.
The repository is not marked archived, which avoids the strongest abandonment signal, but its last push was about 12 years ago and therefore does not offset the lack of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
star/collection Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.