The package is small and clearly structured, with tests, a README, a matching source repository, and a permissive license. Its single maintainer and complete lack of releases or commits since July 2020 make future compatibility and support uncertain.
58%
Total Score
50
100
78
88
The registry namespace and repository are owned by the same individual account, providing direct ownership alignment, though it also indicates no organizational backing.
The package has had no release in over six years, with zero releases in the last 12 months. This is a meaningful maintenance concern despite the five-release history and stable current version.
There were no commits and no active maintainers in the last three months, consistent with a project that has not been actively maintained since 2020.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not determine health for a small stable library.
Composer is used as the build tool, showing basic project tooling, but no security scanning tools are present. The missing scanning is a modest transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.