Usable with caveats: the package is licensed, documented, tested, and not deprecated, but maintenance appears dormant, with no release in nearly three years and no recent repository commits. Its very small user base and lack of a security policy add transparency risk.
58%
Total Score
50
100
78
83
The repository is owned by an individual user rather than an organization, so the single registry maintainer reflects a genuinely narrow backing base. That increases continuity risk when combined with inactivity.
The package has 14 releases and previously released about every 16 days, but its latest release was in November 2023 with none in the last 12 months. The long release gap is a meaningful maintenance concern.
There were no commits or active maintainers in the three months before collection. Combined with the old latest release, this indicates the project is currently dormant rather than actively maintained.
The repository has 1 star, 0 forks, and 1 watcher, so there is little community evidence to compensate for the low maintenance activity. Popularity is supporting evidence only, but this leaves a thin external validation base.
The repository uses Composer build tooling, but no security scanning tool was detected. Build support is positive; the missing scanning provides only a modest process concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
darling/php-text-types Version ^1.0 | — | — |
darling/php-unit-test-utilities Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.