The package includes a changelog, matching source repository, and MIT licensing, which improve transparency. The missing README, absent tests, and lack of a security policy make adoption less reassuring.
40%
Total Score
50
63
50
The latest release was June 25, 2022, and there have been no releases in the last 12 months despite 11 releases overall. This long release gap is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since June 2022.
The package has a changelog, but it has no README and no tests in either the artifact or repository. Missing tests are normal packaging practice, while the absent README is a real integration and transparency gap for this library.
The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a maintainability and transparency gap, though it is less serious than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
escsrl/user Version ^4.0 | — | — |
doctrine/orm Version ^2.7 | — | — |
nesbot/carbon Version ^2.7 | — | — |
escsrl/repository Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.