The repository has had no commits for over six years, and it has no security scanning or security policy. Its MIT license, organization backing, minimal runtime dependency, and GitHub release support reduce the concern for a stable test-data package.
62%
Total Score
83
100
83
75
This package has only one release, published over six years ago, with no releases in the last 12 months. That suggests abandonment risk, although a test-data package may be intentionally stable.
There were no commits and no active maintainers in the last three months, consistent with the last push being over six years ago. This is the main maintenance concern, though fixed test data may not require frequent changes.
The repository has zero stars and forks and one watcher, providing little community evidence to offset the lack of recent activity. Popularity is supporting evidence rather than a requirement for a small test-data package.
Composer is used as the build tool, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence that the release is unsafe.
No security policy was found in the repository. This is a transparency gap, although a small package containing test data has limited security-reporting needs.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.