The package has a clear MIT license, tests, release notes, and a repository that matches the package. Pin v0.5 and expect to maintain the integration yourself because project activity has stopped.
58%
Total Score
33
75
88
The repository had zero commits and zero active maintainers in the last three months, with the last push occurring in March 2021. This is the strongest evidence that maintenance has effectively stopped.
The registry namespace and repository are owned by the same individual account, providing direct ownership alignment. It does not provide the broader backing of an organization, so long-term continuity remains dependent on one owner.
The latest release was published in March 2021, and there have been no releases in the last five years. The package had 14 releases in its first few months, but its long subsequent silence lowers maintenance confidence.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it also gives no evidence of an active user or maintainer community.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of broad community validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vimeo/psalm Version ^4.5 | — | — |
illuminate/contracts Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.