The package includes a clear README, tests, release notes, an MIT declaration, and a matching organization-owned repository. Its small user base, absent security policy, and lack of recent commits make long-term maintenance less certain.
58%
Total Score
63
100
72
88
The package has four releases, but none in the last 12 months and its latest registry release was about 6 years ago. This materially raises abandonment and compatibility risk.
There were zero commits and zero active maintainers in the last 3 months, weakening evidence of active upkeep and increasing the risk that compatibility problems will remain unresolved.
There is one open issue and no issues or pull requests were opened or closed in the last month, indicating little current community activity.
Seven stars and one fork indicate a small adoption footprint. Popularity is only supporting evidence, but this provides little external validation or resilience.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.