A stable major release, tests, and a clear README support routine use. Maintenance has gone quiet, security scanning is absent, and all seven workflow actions are unpinned.
58%
Total Score
67
100
81
67
The package is mature, but it has only seven releases over roughly 14 years and none in the last 12 months, indicating a slow and currently inactive release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance may have stalled.
There are only three open issues and no recent issue or pull-request activity, which is consistent with a quiet project but offers little evidence of active support.
The repository name does not match the package name and its README does not mention the package, creating uncertainty that the linked repository is specifically for this release.
Composer build tooling is present, but no security-scanning tool was detected, leaving repository security hygiene less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dflydev/dot-access-data Version ^3 | — | — |
dflydev/placeholder-resolver Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.