The MIT license, stable versioning, and simple Composer-only build make inspection straightforward. Its tiny, untested 11-file footprint leaves little evidence of ongoing maintenance, so adopt only with an internal owner.
38%
Total Score
0
64
100
The latest release was published in September 2020, with no releases in the last 12 months despite 18 historical releases. This long period without a release is strong abandonment evidence.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package having been inactive since September 2020.
The artifact includes a README and the exact version has a GitHub release, which provide some transparency. The README is only 19 characters and neither the package nor repository contains tests, limiting consumer guidance and verification.
The repository name does not match the package name and its README does not mention the package, weakening confidence that the linked source clearly documents this package.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no meaningful external adoption signal to offset the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^5.2 | — | — |
symfony/http-client Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.