The small five-file artifact is easy to inspect, uses Composer, and has no install-time scripts; the release also includes notes for an autoloading fix. Missing tests and security tooling leave little evidence of ongoing quality control, and adoption carries substantial abandonment risk.
34%
Total Score
50
67
75
Only two releases were published, both in August 2018, with no release in the last 12 months; this is strong evidence of an inactive project.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push and materially increasing abandonment risk.
Composer is used for the build, which supports reproducible package structure, but no security scanning tools are configured; this is a modest quality-control gap.
The repository is not archived, which avoids the strongest repository-level abandonment signal, but its last push was in August 2018 and does not offset the lack of recent activity.
No repository security policy was found, leaving vulnerability reporting and maintenance expectations unclear for a package with no other security-scanning evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.