The MIT license, focused dependency set, repository tests, and release notes make the code straightforward to inspect. Its lack of a security policy adds a smaller transparency concern.
35%
Total Score
50
100
81
75
This package has made only one release, with no releases in about 11 years. That strongly limits evidence of ongoing maintenance for a dependency.
There were no commits and no active maintainers in the last three months. Combined with the repository's last push in March 2015, this is strong evidence of abandonment.
The repository uses Composer, but no security scanning tool was detected. This is a modest maintenance and transparency gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.