Usable with caveats: the package is licensed, tested, documented, and has a clean stable release, but it has had no release or repository commits for about two years and seven months. Its very small community and lack of a security policy make future maintenance less certain.
62%
Total Score
50
100
78
90
There were 12 releases after the first release, but none in the last two years and seven months; this is a meaningful sign of slowing or stopped maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete maintenance concern for a library consumers may need to keep compatible.
The repository has only 2 stars, 0 forks, and 1 watcher. This is not disqualifying for a small utility library, but it provides little independent evidence of broad review or adoption.
Composer is used for the build, but no security scanning tools were detected; the small, simple package structure partly offsets this hygiene gap.
The linked repository is not archived, but its last push was about two years and seven months ago, consistent with the release inactivity and limiting confidence in ongoing support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.