The package has clear documentation, MIT licensing, and release notes for this version. Its minimal project lacks tests and security scanning, making future changes and maintenance harder to verify.
40%
Total Score
50
78
83
This is the only release, published in October 2015, with no releases in the last 12 months. That long period without published updates is a substantial abandonment and compatibility risk.
The repository has had no commits and no active maintainers in the last three months, consistent with the package's long-dormant release history. The repository is not archived, but there is no observed recent maintenance.
The repository has only 7 stars and 1 fork, providing little supporting evidence of broad review or an active user base. Popularity is not required for health, but it does not offset the maintenance concerns.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap for a package that executes shell commands.
The repository has no security policy, leaving no documented process for reporting or handling security issues. This matters more because the package launches and pipes operating-system processes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.