58%
Total Score
caution
Usable with caveats: releases stopped in March 2019 and repository work has been inactive for about three years.
A LICENSE.txt file and repository license file are present, but the manifest declares proprietary while the artifact license is recognized as GPL-3.0. That mismatch needs clarification for downstream distribution.
The latest registry release was about 7 years ago, with no releases in the last 12 months. This is partly offset by a repository push about 3 years ago, but release maintenance is clearly stale.
The repository recorded zero commits and zero active maintainers in the last 3 months. With the last release about 7 years ago, this raises maintenance and compatibility risk.
There are four open issues and two open pull requests, but no issues or pull requests were opened or closed in the last month. This supports the broader picture of limited current activity.
The repository uses Composer, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.