The package is compact, documented, licensed, and tested, with a minimal dependency profile. Its tiny user base and lack of security policy add uncertainty for long-lived production use.
38%
Total Score
25
100
64
88
The package has only one release, published in October 2018, with no releases in the following eight years. This is strong evidence of abandonment risk despite the stable version designation.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity.
The repository is owned by an individual user rather than an organization, so the small registry maintainer footprint is not compensated by organizational backing.
The repository has only 2 stars, 0 forks, and 2 watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of broad review or community support.
Composer is used as the build tool, providing ordinary project structure, but no security scanning tooling is present. The missing scanner is a modest hygiene gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.