The package includes tests, a substantial README, and a clear BSD-3-Clause license. Its repository is not archived and the registry has not deprecated it, but it has no security policy. Treat it as legacy code and avoid relying on active maintenance.
42%
Total Score
25
50
78
83
The package has had only two releases, both in November 2019, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency, despite the stable 1.0.1 version.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating a serious abandonment risk.
Six runtime dependencies create some maintenance surface for this older package, but the available data does not show an unusually large or suspicious dependency set.
The repository is owned by an organization, which provides some backing context, but the observed release and commit activity does not show that the organization is actively maintaining this package.
The repository has one star, zero forks, and one watcher. Low adoption is supporting evidence of a small project, though popularity alone does not determine health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chippyash/monad Version ~2.1 | — | — |
graphp/graphviz Version ~0.2 | — | — |
myclabs/php-enum Version ^1.7 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
chippyash/assembly-builder Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.