It has a clear MIT license, tests, a matching source repository, and a small dependency surface. Its long period without updates leaves compatibility and maintenance risks for a new project.
38%
Total Score
50
100
67
88
The package has only one release, published more than 8 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this is strong evidence of inactive maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. Low popularity is supporting evidence rather than decisive, but it provides little evidence of broad community adoption or support.
The project uses Composer, showing basic build tooling, but has no security scanning tools. The tooling is adequate for a small package but provides limited additional assurance.
The repository is not archived, which preserves a path for future maintenance, but it was last pushed more than 8 years ago. The stale repository activity outweighs its unarchived status.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.