The project has one star, no security scanning, and only one registry maintainer, limiting confidence in ongoing support. The MIT license, focused dependency set, and clear README provide useful transparency.
38%
Total Score
0
69
75
The latest release was published nearly 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having four releases overall.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially lowers confidence that defects or compatibility problems will be addressed.
The repository has one star, one fork, and one watcher. Popularity is only supporting evidence, but these very small numbers provide no meaningful sign of an active user or contributor community.
Composer is used for builds, which is appropriate for this PHP package, but no security scanning tools are configured. The missing security tooling is a maintenance and transparency gap for a package that provides web-facing tools.
The repository has no security policy. This makes vulnerability reporting and coordinated fixes less clear, adding to the concern created by the inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pyrocms/lex Version ~2.3 | — | — |
corneltek/pux Version ~1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.