The README is present and repository tests exist, but licensing and security documentation are missing. The project has little evidence of ongoing support for a dependency.
10%
Total Score
43
75
Packagist marks the entire package as abandoned, with no replacement package supplied. This is a direct warning against taking a new dependency on it.
This is the only release, published about eight years ago, with no releases in the last 12 months. That strongly increases abandonment risk.
The linked repository is archived and was last pushed in November 2018, indicating that active maintenance has ended.
The package declares no license, contains no license file, and the repository has no license file. This creates a real legal and transparency gap for adoption.
The repository has 52 stars and 15 forks, providing modest evidence of past use. This does not compensate for the package being abandoned and archived.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.