The repository is small but coherent, with tests, a README, and organization backing. Its missing license and minimal adoption add friction for long-term use.
40%
Total Score
100
63
88
This package has only one release, dated August 2016, with no releases in nearly 10 years. That strongly indicates abandonment risk despite the repository remaining available.
No license is declared and neither the package nor linked repository contains a detected license file. That leaves redistribution and use rights unclear.
The repository has zero stars and forks and only two watchers, providing little evidence of community use or external review.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a small utility package this is a hygiene gap, but it does not outweigh the direct maintenance evidence by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.