The package includes a clear README, tests, an MIT license, and minimal runtime dependencies. Its maintenance record is stagnant, so pin this version and expect to own compatibility fixes.
52%
Total Score
50
100
83
75
The package has had only two releases, both in October 2018, with no release in the last 12 months. This indicates a long period without published maintenance, although the stable v1.0.1 release remains available.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with maintenance having stopped after October 2018. There is no recent activity to offset the age of the release.
The repository uses Composer, but no security scanning tooling is present. The build setup supports reproducible project use, while the missing scanning is a minor hygiene gap rather than a standalone adoption blocker.
No security policy is present, leaving no documented reporting path for vulnerabilities. For a small, inactive package this adds a modest transparency concern, but it is not severe on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.