The small artifact is coherent, dependency-light, and free of install-time scripts. Its license files are present but conflict with the MIT manifest, and the repository has no security policy.
46%
Total Score
0
100
69
83
The package has had only two releases, with none in the last 12 months; its latest release was in October 2019, indicating prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
License files are present in both the artifact and repository, but the detected Apache-2.0 text does not match the manifest's MIT declaration, creating licensing ambiguity.
The package includes a README, but it is only 18 characters long and provides little guidance for consumers of this library; the lack of packaged tests and changelog is normal.
The repository uses Composer build tooling, providing basic project tooling, though no security scanning tool is configured.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.