Its single-maintainer project has little supporting activity or security process. The stable version and clean workflow audit do not offset the long abandonment gap and missing license.
38%
Total Score
33
42
75
No license is declared, detected, or included in the package or repository. This creates a material adoption and legal-transparency gap.
The package has had only three releases, all concentrated on November 14, 2021, and none in the last five years. This strongly indicates abandonment risk despite the stable latest version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no development since November 2021. This is a strong abandonment concern.
Only one registry maintainer is listed, leaving limited visible publishing redundancy. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader project support.
The package has no README, while tests and a changelog are normally repository concerns and their absence is not itself a packaging defect. The missing consumer documentation is still a transparency gap for a PHP library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.