The repository has tests, a changelog, matching source, and active build tooling. Workflow references are unpinned, and all recent commits come from one maintainer.
68%
Total Score
50
100
93
67
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the concentrated maintainer base.
The latest registry release was in December 2024, with no releases in the last 12 months; this indicates a substantial release pause despite the package's long history.
One contributor made all two recent commits, concentrating current maintenance responsibility in a single person.
Two commits were recorded in the last three months, showing recent activity, but the low volume limits evidence of sustained maintenance.
No repository security policy was found, a modest transparency gap for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^2.0 || ^3.0 | — | — |
psr/simple-cache Version ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.