Its README and tests support straightforward integration, while the MIT declaration, single runtime dependency, and lack of install-time scripts keep the package simple. The repository is not archived and matches the package, but its small audience and solo ownership limit evidence of long-term maintenance.
63%
Total Score
50
100
83
75
One registry maintainer is consistent with a small user-owned project, but it provides limited redundancy if that maintainer stops supporting the package.
This is the package's only release, published 576 days ago, with no releases in the last 12 months. That leaves maintenance continuity unproven for a dependency.
There were zero commits and zero active maintainers in the last three months, reinforcing that the project is currently inactive rather than actively maintained.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of maturity or community support.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tool is present, a minor transparency and hygiene gap for a small library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.