The MIT license, tests, and exact GitHub release improve transparency. An empty README, no security policy, and no security scanning leave limited guidance and assurance.
38%
Total Score
50
100
61
75
The package has only one release, published about 6 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.
The repository is not archived, but it was last pushed about 6 years ago, matching the stale release history and reinforcing abandonment concerns.
Only one registry maintainer is listed, leaving a thin publishing base. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for that concentration.
Tests are present and this version has a GitHub release, which supports basic project maturity. The README is empty and there is no changelog, limiting consumer guidance, though the missing changelog is normal for a repository-managed release history.
The registry namespace and repository owner match, and both are attributed to codicastudio. The owner is an individual account rather than an organization, so backing appears limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0 | — | — |
friendsofphp/php-cs-fixer Version ^2.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.