A single runtime dependency, MIT licensing, a substantial README, and comprehensive tests make the package easy to evaluate and adopt. Its small popularity and absent security policy add modest reservations, but the repository remains identified and unarchived.
58%
Total Score
50
100
88
75
The package has 11 releases since January 2015, but its latest release was in October 2021 and there have been no releases in nearly five years, indicating substantially reduced maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the long gap since the latest registry release.
There are three open issues and one open pull request, but no issues or pull requests were opened or closed in the last month, consistent with limited current project activity.
Composer is used for the build, but no security scanning tools were detected. For a small library this is a modest transparency and hygiene gap rather than a severe dependency risk.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear and slightly reducing project transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.