The package includes tests, a clear README, an MIT license, and no runtime dependencies. Its maintenance record is effectively dormant, so future fixes and compatibility updates are uncertain.
42%
Total Score
0
100
64
83
The package has had only two releases, with the latest release on August 15, 2019 and none in the last 12 months. This is strong evidence of abandonment for a dependency that may need future fixes.
There were zero commits and zero active maintainers in the last three months, after roughly seven years without a repository update. This materially raises the risk that defects or compatibility changes will go unaddressed.
Composer is used for build and dependency tooling, but no security scanning tool is configured. This is a modest transparency gap, though it does not outweigh the clearer maintenance evidence.
The repository is not archived, which avoids the strongest abandonment signal, but its last push was on August 15, 2019. That old repository state is consistent with the inactive release history.
The repository has no published security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a transparency concern for a package intended for dependency use.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.