The project is small but its source remains present and the package is easy to inspect. Its license, tests, and focused dependency set help, but activity and release history are thin.
61%
Total Score
50
100
79
75
The registry lists one maintainer, creating a limited bus factor for publishing and maintenance, although the linked repository is directly owned by that user.
Only two releases have been published, and there were no releases in the last 12 months; the latest release is from January 2021, indicating a stale delivery cadence.
There were no commits and no active maintainers in the three months before collection, which weakens evidence of ongoing maintenance; the 2024 push is some compensating evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.0||^3.0 | — | — |
psr/container Version ^1.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.