Clear documentation, a license, and a small dependency surface make the package easy to inspect. Its tiny project footprint and long inactivity leave maintenance and compatibility risks.
58%
Total Score
75
100
75
83
The package has only three releases, all concentrated in about three days, and none in roughly nine years. That sustained inactivity raises maintenance and compatibility concerns despite the package's likely stable scope.
There were no commits and no active maintainers in the last three months, consistent with the roughly nine-year gap since the last release. This is the strongest maintenance concern.
The repository has one star and no forks, indicating a very small project footprint. Low popularity is only supporting evidence, but it provides little independent confidence alongside the inactivity.
Composer build tooling is present, but no security-scanning tooling was detected. For this small, old package this is a modest transparency gap rather than a decisive risk.
The repository has no security policy. That reduces disclosure transparency, although the package's small scope and clear source mitigate the impact.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.