Risky to adopt: this package has had no release or repository update for more than five years, with only two releases and no visible community traction. It is not deprecated or archived, and it includes tests and a license file, but the long inactivity makes abandonment a significant concern.
42%
Total Score
50
100
67
88
The package has only two releases, both published in December 2020, and none in the last 12 months; the latest release is more than five years old. This is strong evidence of abandonment risk despite the package not being formally deprecated.
The artifact contains tests, and the repository also has tests, providing some validation evidence. The missing README and changelog are transparency gaps for a library, although the absence of a changelog in the published artifact is normal packaging practice.
The repository is owned by an individual user rather than an organization, and the registry namespace differs from that account name. This is consistent with a small personal project but offers limited visible institutional backing.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of ongoing use or community oversight.
Composer is used as a build tool, which is appropriate for this PHP package. No security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.