The small source tree and release notes make this lightweight extension easy to inspect, while organizational backing is a positive. Its long release silence limits confidence in ongoing maintenance; pin this version if its dependency constraints fit.
57%
Total Score
75
100
86
75
The package has had no registry release for nearly four years, with the last release on October 21, 2022. This is the strongest evidence of stale maintenance, although the repository remains available and was pushed later.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current development. This reinforces the release-history concern but does not show that the project is archived.
The project uses Composer build tooling, but no security-scanning tool was detected. For a small package this is a limited hygiene concern, not evidence of unsafe behavior.
The repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations. This matters more because recent maintenance activity is absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.14 | — | — |
elephox/console Version ^0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.