There is no declared or detected license, README, test suite, changelog, or security policy. Organization ownership and a matching repository provide some provenance, but not enough to offset the package's limited transparency.
38%
Total Score
100
67
75
This package has only one release, published over six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
Neither the package nor its repository contains a declared or detected license file. Without licensing terms, depending on the code creates a material legal and transparency gap.
The published artifact has no README, tests, or changelog, and the repository also reports none. Missing tests and changelogs are not concerning for packaging, but the missing README reduces consumer transparency for this library.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful adoption signal.
The project uses Composer, but no security scanning tools are reported. This is a modest transparency gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
circli/core Version dev-master | — | — |
ramsey/uuid Version ^3.8 | — | — |
symfony/console Version ^4.3 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.