The small package has a clear MIT declaration, a README, and no install-time scripts. Its linked repository is identifiable and not archived, but it lacks tests and security tooling, leaving little evidence of ongoing care.
38%
Total Score
0
100
72
75
The package has only two releases, both in August 2021, and no releases in the last five years. This is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with a repository that has been inactive for over five years.
The repository has one star, one watcher, and no forks. Low adoption is only supporting evidence, but it provides little external indication of maturity or community support.
Composer is used for builds, but no security scanning tools are present. This is a transparency and maintenance gap, though it is less significant than the long inactivity period.
The linked repository is not archived, but its last push was over five years ago. The non-archived status is positive, while the age reinforces the maintenance concern shown by release and commit activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.