Usable with caveats: this is a small, clearly identified MIT package with a readable README and no install-time scripts, but it has had no release or repository activity since January 2018. Depend on it only if the functionality is simple enough to accept likely maintenance abandonment.
52%
Total Score
67
78
88
There have been zero commits and zero active maintainers in the last three months, consistent with the repository's last push in January 2018. This is the strongest evidence of abandonment risk.
The package has only one release, 1.0.0, published in January 2018, with no releases in the last 12 months. That long period without updates is a meaningful maintenance and compatibility risk.
The repository has 1 star and no forks, indicating limited community adoption. Popularity is supporting evidence only, but this provides little external maintenance signal.
Composer is used as the build/package tool, but no security scanning tooling is present. For this very small package that is a minor transparency gap rather than a severe risk.
The repository is not archived, but its last push was in January 2018. The unarchived status is reassuring, while the old last-push date still supports the maintenance concern from release_history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.