The package is a very small library with four runtime dependencies and no install-time scripts. Its BSD-2-Clause declaration is clear, but the artifact lacks consumer documentation and the repository could not be found, limiting maintenance and provenance checks.
42%
Total Score
50
100
The latest release was in November 2020, with no releases in the past 12 months and only two releases overall; this indicates substantial abandonment risk.
The artifact has no README, which is a meaningful documentation gap for a library consumers must integrate; the absence of tests and a changelog is normal for a published artifact.
The release is still on the 0.x line, so its API may not be mature or stable; the absence of prerelease labeling provides little compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/serializer Version ^3.0 | — | — |
eirwego/license Version ^0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.