The package includes a README, tests, and a GPL-3.0 license, which make its small codebase easier to assess and use. Its single-maintainer project has had no commits or releases for more than four years, so future fixes and compatibility work are uncertain.
57%
Total Score
50
92
One registry maintainer is associated with a user-owned project, leaving a thin operational base for publishing and maintenance. The linked repository and package ownership align, but there is no broader maintainer capacity shown.
The package has four releases, but all were published within a short period on March 14, 2022, with no releases in the following four years. This is strong evidence of a dormant release cycle.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the latest push being more than four years ago. No newer activity compensates for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.4 | — | — |
bcosca/fatfree Version ^3.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.