It has a clear MIT license, tests, and a small, coherent source tree. Organization backing and no install-time scripts help, but the missing security policy leaves little recent oversight to assess.
42%
Total Score
50
100
78
75
The latest release was about 10 years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite the package having 13 historical releases.
The repository recorded no commits and no active maintainers in the last three months, consistent with the release history showing that development stopped about 10 years ago.
There are no open issues or pull requests and no activity in the last month. With no recent commits or releases, this supports the conclusion that the project is inactive.
The repository has one star and two forks, indicating limited adoption. Popularity is only supporting evidence and does not materially change the stronger maintenance concerns.
Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ~2.7 | — | — |
symfony/process Version ~2.7 | — | — |
droid/libcommand Version ^1.0 | — | — |
zordius/lightncandy Version ~0.93 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.