The package includes tests, a changelog, a license, and security scanning. Its small, concentrated project activity offers little recovery confidence.
12%
Total Score
50
64
50
Packagist marks the entire package as abandoned, with no replacement package named. This is a direct warning against taking a new dependency on the release.
The linked repository is archived, and its last push was on July 22, 2026. Archived source removes normal expectations of ongoing maintenance or fixes.
The package is only 94 days old with four releases, and the latest release was on July 22, 2026. This provides limited evidence of sustained maintenance.
One contributor made 13 of 15 recent commits, or about 87%, while the second made 2. This concentration increases continuity risk, especially for a user-owned project.
The repository had 15 commits in the last three months from two active maintainers, showing recent activity before archival but not ongoing maintenance afterward.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/cache Version ^3.0 | — | — |
ramsey/uuid Version ^4.7 | — | — |
paragonie/paseto Version ^3.1 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.