The stable MIT release has no install scripts and a matching source repository, which keeps adoption straightforward. Its tiny source tree and lack of security tooling leave little evidence of ongoing project care.
35%
Total Score
75
71
83
The latest of five releases was published in December 2015, with no releases in the last 12 months. This long silence is strong evidence of abandonment risk despite the package's stable version.
The package contains only four source and manifest files, with no visible documentation or supporting project files. That may fit a small template engine, but it offers limited transparency for assessing ongoing care.
There have been no new or closed issues or pull requests in the last month. The empty queue is not harmful by itself, but alongside the old release history it provides no evidence of active maintenance.
Composer is used for builds, which is appropriate for this package, but no security scanning tooling was detected. This is a secondary hygiene gap rather than evidence of unsafe code.
The repository is not marked archived, but it was last pushed in December 2015, so its unarchived status does not offset the prolonged lack of activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.