Its MIT license, focused five-file layout, and lack of install-time scripts reduce adoption friction. Maintenance is the concern: this release has never been followed by another, and the repository shows no recent activity.
38%
Total Score
0
78
100
The package has only one release, published in December 2017, with no releases in the last 12 months. That long period without a follow-up materially increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's long-standing lack of releases. No provided activity signal compensates for this maintenance gap.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of an active user or contributor community. Popularity is not decisive, but it provides no counterweight to the inactivity.
Composer is used as a build tool, but no security scanning tooling is present. The missing scanning is a minor hygiene gap, not a standalone reason to reject this small package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.