The source is small but coherent, with a matching repository, README, MIT declaration, and no install-time scripts. Its lone maintainer and absent security policy increase adoption risk.
38%
Total Score
25
63
75
The package has had no releases in the last 12 months, and its latest release was over 10 years ago. This strongly indicates abandonment for a framework integration package.
The repository shows zero commits and zero active maintainers in the last three months, consistent with a project that has received no recent maintenance.
Only one registry account can publish the package, creating a thin publishing base. The repository is user-owned, so there is no organization backing shown to compensate for that concentration.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.
Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate for the ecosystem, while the missing security checks modestly reduce transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.