A focused dependency footprint and included tests make the package straightforward to evaluate. Its stable licensing and non-archived repository help, but security documentation and automated scanning are absent.
42%
Total Score
0
100
69
50
The latest release was in April 2018, with no releases in the last 12 months and only four releases overall. This long gap materially raises abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and showing no current maintenance activity.
The repository has zero stars, zero watchers, and one fork. Popularity is only supporting evidence, but these numbers provide little evidence of an active community to compensate for the maintenance gap.
Composer build tooling is present, but no security scanning tools were detected. That limits automated oversight, particularly alongside the absence of recent maintenance.
The repository is not archived, which is a modest positive, but its last push was in January 2020 and does not offset the prolonged lack of releases or recent commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.