The release is recent, tested, documented, and has a matching active repository. Registry abandonment and one-person maintenance make long-term support uncertain.
42%
Total Score
50
100
83
75
The package is marked abandoned at the package scope, with no clear replacement beyond the named package itself. This is a direct warning against starting a new dependency despite the recent release.
The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
All recent commit activity comes from one contributor, leaving no demonstrated maintenance redundancy.
The repository has one commit in the last 3 months, showing some current maintenance but a very limited recent cadence.
Composer is used for builds, but no security scanning tool was detected. For this small library, that is a modest transparency and hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.