The stable MIT license and lack of install-time scripts reduce adoption friction. Maintenance and project activity have effectively stopped, leaving this small package with limited evidence of ongoing support.
32%
Total Score
0
63
75
This package has only one release, published about four years and ten months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the old release, this indicates that maintenance has stopped rather than merely slowed.
A README entry exists, but it is empty, and the package has no tests or changelog. The empty consumer documentation is a transparency and integration concern for a plugin package.
The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but it provides little supporting evidence of adoption or community oversight.
Composer is used as a build tool, but no security scanning tooling is present. For this small package the missing scanning is a hygiene gap, not the primary risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.