Risky to adopt: the package has had no release in more than 12 years and no repository commits in more than 10 years. It is not deprecated or archived and has a clear, licensed package with documentation, but its maintenance appears effectively stopped.
42%
Total Score
50
72
83
The last release was published in September 2013, with no releases in the past 12 months. That long period without updates is strong evidence of abandonment risk, despite the package having 30 historical releases.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing long-term inactivity. This materially increases abandonment risk.
There were two open issues but no new or closed issues and no pull requests in the past month, providing no evidence of active maintenance or issue resolution.
The repository has zero stars and forks and only four watchers. Popularity is supporting evidence rather than a verdict, but these counters offer little evidence of a maintained user or contributor community.
The repository uses Composer, which is appropriate for this PHP package, but it has no security scanning tools. This is a modest transparency and maintenance gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.