The package is small and clearly identified, with an MIT license and release notes for this version. Its maintenance appears to have stopped for about five years, and the lone maintainer, absent tests, and absent security tooling leave little evidence of ongoing support.
40%
Total Score
25
71
50
The package has had no registry release in roughly five years: its latest release was July 2021, with zero releases in the last 12 months. The five historical releases show initial activity but do not offset the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly five-year-old last release and indicating no visible ongoing maintenance.
Only one registry publishing maintainer is listed. The individual ownership context provides no organizational backing to compensate for the narrow maintenance base.
Composer build tooling is present, but no security scanning tools are reported. This weakens maintenance hygiene without independently making the release unsafe to depend on.
The linked repository is not archived, which is a modest positive, but its last push was in July 2021 and does not counter the lack of recent activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.