The MIT license, complete artifact tree, and README make adoption straightforward. A single maintainer and no security scanning leave limited oversight. The last release and repository push were in October 2020, so compatibility and fixes are uncertain.
52%
Total Score
25
75
75
The package has only 5 releases over about 14 years, with no release in roughly 5 years and 11 months. This strongly suggests maintenance has stalled, although the package is not deprecated.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push occurring in October 2020. There is no recent activity showing ongoing compatibility or bug-fix work.
One registry maintainer provides a thin publishing base and creates a bus-factor concern. The linked repository is user-owned rather than organization-backed, so no organizational capacity is shown to compensate.
Composer is used for the build, which fits the PHP package and supports repeatable installation. No security scanning tools are configured, leaving a modest oversight gap.
The repository is not archived, so it remains technically available for maintenance. Its last push was in October 2020, meaning the non-archived status does not demonstrate active upkeep.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.