The package is licensed, well documented, and backed by a matching organization repository with a substantial test suite. Its small runtime dependency set and lack of install-time scripts reduce adoption friction, but maintenance evidence is limited.
64%
Total Score
75
100
83
100
The package has 41 releases, but none in the last 12 months and the latest release was about 2 years and 6 months ago. This indicates a meaningful maintenance slowdown, though the stable v5.0.0 release history shows prior maturity.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the extended release gap. That raises abandonment risk despite the repository being available and unarchived.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a minor transparency and hygiene gap, not evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
charcoal/config Version ^5.0 | — | — |
erusev/parsedown Version ^1.7 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.