The README is brief but includes installation and usage guidance, and this version has release notes. Maintenance has stopped since March 2022, with no recent commits and only one registry maintainer; workflow hygiene also needs attention.
38%
Total Score
25
58
50
The package has made three releases, but its latest release was in March 2022 and there were no releases in the last 12 months, indicating prolonged inactivity.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push being in March 2022 and indicating a strong abandonment risk.
Only one account has registry publishing access. Because the repository is owned by that same individual rather than an organization, this provides a thin maintenance base.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance weakness, not evidence that the package is unsafe.
The linked repository is not archived, but its last push was in March 2022, so the non-archived status does not compensate for the observed inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.