The package is clearly licensed and its source matches the published package, with no install-time scripts. Maintenance appears effectively abandoned, and the repository has no security policy or automated security scanning; pin this only if its small, stable shim is still required.
38%
Total Score
50
72
75
The package has only one release, published nearly 11 years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that has been inactive for many years.
A single registry maintainer is consistent with the organization-backed repository and is not concerning by itself, but it provides little publishing redundancy.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide no external evidence of active use or community support.
Composer is used as the build tool, showing basic project tooling, but no security scanning tools are configured, leaving maintenance and vulnerability-detection hygiene weaker.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.