Usable with caveats: it has a clear license, tests, documentation, a matching repository, and no deprecation or install-time scripts. However, the last release and repository push were over seven years ago, with no recent commits, so ongoing maintenance and compatibility are uncertain.
58%
Total Score
67
100
83
88
The package has six releases since 2012, but none in the last seven years; this strongly limits confidence that compatibility issues will be addressed.
There were no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating likely abandonment or dormancy.
There are no new issues or merged pull requests in the last month; together with one open pull request, this suggests little current project activity.
Composer is used as the build tool, but no security scanning tools are reported; this is a transparency and process gap, not a severe risk for this small legacy library.
The linked repository is not archived, but its last push was over seven years ago, so the non-archived status does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.