The package is small and self-contained, with tests, an MIT license, and no runtime dependencies. Its single maintainer and minimal repository footprint leave little evidence of ongoing support.
42%
Total Score
25
100
63
The package has only two releases, both published in October 2017, with no releases in the last nine years. This is strong evidence of abandonment risk for a dependency.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in October 2017. The long-standing inactivity materially lowers confidence in ongoing support.
The registry lists one maintainer, which is a limited support base for a package with no recent release or commit activity. The small scope reduces the impact but does not remove the continuity risk.
The repository name does not match the package name and its README does not mention the package, so the source-package relationship is unclear. This creates a transparency concern even though the repository contains the expected small PHP project structure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.