The very small README and absent security policy limit transparency. MIT licensing, one runtime dependency, and no install scripts reduce friction but do not offset the maintenance concern.
38%
Total Score
100
56
83
This package has had only one release, on September 4, 2018, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency intended for ongoing use.
A README is present, but it contains only 15 characters and the project has no tests or changelog. The missing tests and changelog are normal for published artifacts, while the extremely limited README reduces consumer transparency.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional sign of community adoption or review.
Composer is used as the build tool, but no security-scanning tool is configured. The build setup is appropriate, while the lack of scanning is a modest hygiene gap.
The repository is not formally archived, but it was last pushed on September 4, 2018. The unarchived status provides little compensation for nearly eight years without an update.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.