The package is well documented and tested, with a clear license, focused dependencies, and a repository that still matches the package. Maintenance has effectively stopped, so future compatibility and issue response are uncertain.
62%
Total Score
33
100
83
83
The latest release was published about 8 years ago, and there were no releases in the last 12 months. The 13-release history shows earlier activity but does not offset the long period without a new release.
There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this is strong evidence that maintenance has stalled.
The registry namespace and repository are owned by the same individual account, providing a consistent ownership link. The single-person backing also offers less organizational redundancy than a maintained team or organization.
There were no new or closed issues or pull requests in the last month, while 38 issues and 7 pull requests remain open. This suggests little recent issue handling.
Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.