The MIT license and matching repository make the source clear, but the tiny README and absent security policy limit confidence for adoption. No tests or security scanning are reported, leaving little evidence of ongoing quality controls.
38%
Total Score
50
56
75
This package has only one release, published over 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
The package includes a README, but it is only 33 characters long and provides no tests, changelog, or release notes. Missing tests and changelog are normal for published artifacts, while the minimal README limits consumer transparency.
The registry namespace and repository are owned by the same individual account, so the package has clear ownership but no demonstrated organizational backing.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful external adoption signal.
Composer is used for the build, which is appropriate, but no security scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.