The MIT license, tests, and organization-owned repository provide useful foundations. The missing README and absent security policy reduce transparency for a library.
48%
Total Score
67
100
63
75
This package has only one release, published about four years ago, with no releases in the last 12 months. That is strong evidence of limited maintenance, though it is not proof the code is unusable.
There were no commits and no active maintainers in the last three months, consistent with a repository that has seen no push for about three years. This materially raises abandonment risk.
The package and repository include tests, and this version has a GitHub release. The missing README reduces library consumer guidance, while the absent changelog is normal packaging practice and not a gap by itself.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low engagement levels provide no meaningful community safety net.
Composer is used as a build tool, which fits this PHP package. No repository security-scanning tool was detected, leaving a modest hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.55 | — | — |
everyworkflow/mongo-bundle Version dev-main | — | — |
everyworkflow/data-form-bundle Version dev-main | — | — |
everyworkflow/data-grid-bundle Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.