It is a small, stable Composer package with a short README, a declared MIT license, and no install-time scripts. The repository is not archived, but ongoing support is uncertain.
43%
Total Score
25
100
72
83
The package has had only four releases, with the latest in October 2020 and none in the last 12 months. This long period without releases is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's extended release inactivity and providing no evidence of current maintenance.
The registry lists one publisher account. For this user-owned project, that is a thin publishing base and offers little redundancy if the maintainer becomes unavailable.
The linked repository name does not match the package name and its README does not mention the package, so the repository may not clearly establish ownership of this release.
The repository has one star, no forks, and one watcher. Low visibility is supporting evidence of a small project, though popularity alone does not determine health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ~5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.