The stable release, clear license, and small dependency surface help. One-person ownership and limited project tooling leave little evidence of ongoing care.
44%
Total Score
25
100
75
50
The package has 11 releases but none in the last 12 months, and its latest release was in March 2023, roughly three and a half years ago. This is substantial abandonment risk despite the earlier rapid release cadence.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. This materially raises abandonment risk.
Only one registry account has publish access, which leaves limited visible publishing redundancy. The linked repository is also user-owned rather than organization-backed, so there is no provided evidence of a broader maintainer base.
The repository has only 1 star, 2 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low figures provide little community signal to compensate for inactivity.
Composer is used for builds, which is appropriate, but no security scanning tools were detected. This is a modest hygiene gap alongside the stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.