The MIT license, stable version, clear README, and release notes make the small package transparent to adopt. Its only release and zero commits in the last three months indicate limited maintenance evidence, while the repository has no security scanning or policy.
68%
Total Score
50
100
88
83
The repository is owned by an individual rather than an organization, so the short maintainer base provides limited visible backing for continued maintenance.
The package has one release over 219 days, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. With only one release, this leaves limited evidence of ongoing maintenance.
Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
The repository has no security policy, reducing clarity about how vulnerabilities would be reported and handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.