Usable with caveats: the release is licensed, documented, linked to a matching organization repository, and has repository tests, but maintenance appears stalled. There have been no releases or commits for about 20 months, and the project has little visible community activity and no security policy.
58%
Total Score
63
100
72
88
There were zero commits and zero active maintainers in the last three months, materially increasing the risk that defects and compatibility problems will remain unattended.
The package has seven releases, but none in the last 12 months and its latest release was about 20 months ago, indicating a prolonged release gap after an initially rapid cadence.
Only one issue is open and there has been no issue or pull request activity in the last month, offering little evidence of an active user or maintainer community.
The repository has only 2 stars, 4 forks, and 1 watcher; popularity is supporting evidence rather than decisive, but these counts indicate limited external adoption and review.
Composer build tooling is present, but no security scanning tools were detected; this is a transparency and maintenance gap, though not by itself evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.