The package is small and clearly documented, with tests, a changelog, and an MIT license. Its last release was nearly six years ago, and repository activity has stopped, while the current version remains an alpha.
57%
Total Score
67
50
75
88
The package has five releases but none in the last 12 months; its latest release was nearly six years ago, which is a substantial maintenance concern.
The package declares four runtime dependencies, including GitHub API and Git stream-wrapper components; this is a meaningful dependency surface for a small utility package, but not severe on its own.
There were zero commits and zero active maintainers in the last three months, consistent with a repository that has seen little recent maintenance.
There were no new or merged pull requests and no issue activity in the last month; this adds to the evidence of inactivity, although open-issue data is unavailable.
Composer is used for builds, but no security scanning tools are reported; the missing scanning is a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
consolidation/robo Version ^1.0 | — | — |
knplabs/github-api Version ^1.0 | — | — |
teqneers/php-stream-wrapper-for-git Version ^2.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.