The small, focused artifact has a clear MIT license and no install-time scripts. Its matching repository and stable 1.0 release help, but the lack of tests and security scanning leaves little evidence of ongoing care.
42%
Total Score
33
81
75
The repository had zero commits and zero active maintainers in the last three months, after no observed activity since April 2022. This is strong evidence of abandonment risk.
The package has one registry maintainer. Because the repository is user-owned rather than organization-backed, the thin maintainer base provides limited continuity if that maintainer stops work.
This package has only one release, published more than four years ago, with no releases in the last 12 months. That strongly limits evidence of active maintenance.
There were no new or closed issues or pull requests in the last month. While a small stable project may have little issue traffic, this reinforces the absence of recent maintenance evidence.
The repository has no stars or forks and only one watcher. Popularity is not decisive, but these figures provide no supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version 1.1 | — | — |
laminas/laminas-stdlib Version 3.6 | — | — |
matomo/device-detector Version 4.3 | — | — |
laminas/laminas-dependency-plugin Version 2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.