The package includes a usable README, repository tests, a security policy, and no install-time scripts. The MIT/GPL license mismatch, minimal adoption, and no commits in the last three months make long-term use less reassuring.
58%
Total Score
75
100
78
100
The manifest declares MIT, but the artifact license file was detected as GPL-2.0; although a license is present, the mismatch creates uncertainty about the terms consumers receive.
Seven releases were published within the last 12 months, but they were concentrated around October 2025 and the latest release is about 11 months old, leaving current maintenance uncertain.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for a package released about 11 months ago.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides little external adoption signal.
Composer is used for builds, but no security scanning tools were detected, leaving a modest project-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.