The package has a valid MIT license, a matching repository, and a stable 1.2 release. Maintenance capacity is limited: there have been no releases or commits in over two years, the project has one maintainer, and it has no security scanning or policy.
52%
Total Score
50
81
83
One registry maintainer is a thin support base for a package without recent development activity. The linked repository is user-owned, so there is no organization backing shown to offset that concentration.
The latest release was in November 2023, with no releases in the last 12 months and only three releases overall. This indicates an inactive release line, though the package may be intentionally stable.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with more than two years without a release. No provided maintenance signal compensates for this inactivity.
The repository has one star and no forks, providing little evidence of broad community adoption or an active user base. Low popularity is supporting evidence rather than a decisive health problem.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.