The artifact is small, focused, and includes a README and tests. Its single-maintainer project has been inactive for years and provides no license, making long-term maintenance and legal reuse uncertain.
48%
Total Score
25
64
50
The repository recorded zero commits and zero active maintainers in the last three months, while the last push was in April 2020; this is strong evidence of abandonment risk.
No license is declared, no license file is present in the package, and no repository license file was found, leaving reuse terms unclear.
The package and repository are owned by the same individual account, so there is no organization backing or broader maintenance capacity evident.
Only two releases appeared, both published recently and with no meaningful interval, so there is not enough history to establish sustained maintenance.
Composer is used for the build, supporting reproducible package handling, but no security scanning is configured; for this small package that is a minor hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.