The package is clearly licensed and matches its source repository, with a usable README and no install-time scripts. It offers little evidence of production readiness or ongoing support.
42%
Total Score
50
69
83
Only one release exists, published about 7 years ago, with no releases in the last 12 months. This is strong evidence that the package is not actively maintained.
There were no commits and no active maintainers in the last 3 months. Combined with the single old release, this indicates a substantial abandonment risk.
The repository has zero stars, two forks, and one watcher. Popularity is only supporting evidence, but these low figures provide little indication of broad review or community support.
Composer is used for the project build, but no security scanning tools are reported. The missing scanning is a modest repository-hygiene concern, not evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package that interacts with serial devices.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.