The package is easy to inspect and has a small runtime surface. Its long release gap and absent recent repository activity make future maintenance uncertain, despite the repository remaining available.
55%
Total Score
50
100
83
83
Only three releases were recorded, with the latest in December 2014 and none in the last 12 months. The roughly 11-year release gap is a meaningful maintenance concern.
There were no commits and no active maintainers in the measured three-month period. Combined with the old latest release, this indicates little current maintenance capacity.
There was no issue or pull-request activity in the measured month, with two open issues and one open pull request remaining. This is consistent with a project receiving little recent attention.
Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap, not a standalone adoption blocker.
The repository has no security policy. For a small library this is a hygiene gap, but it does not outweigh the available source, tests, and license evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.