The package includes tests, a usable README, a declared GPL license, and no install-time scripts. Maintenance has stopped recently, the registry reports no releases in the past 12 months, and the assessed version does not match the reported latest version; the repository also lacks a security policy and automated security scanning.
58%
Total Score
75
100
79
75
The package has 27 releases since January 2019, but none in the last 12 months and its latest registry release was in June 2025, indicating a prolonged release pause.
There were no commits and no active maintainers in the last three months, which is a concrete sign of currently inactive maintenance.
Composer is used for the build, but no security-scanning tooling is reported, leaving a modest transparency and hygiene gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
The assessed version is 2.0.0, while the registry reports 1.0.10 as the latest version; this inconsistency warrants caution when selecting or verifying the release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.