The package includes tests, a clear README, MIT licensing, and Psalm checks. Its small runtime dependency set and matching repository make the project easy to inspect and integrate.
45%
Total Score
50
100
78
75
Only two releases were published, both around the initial launch, and there have been no releases in about three years. That leaves little evidence of ongoing maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this is strong evidence that maintenance has stopped.
One registry publishing account is not concerning by itself because the project is backed by an organization-owned repository, but it does leave publishing capacity relatively concentrated.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant project, though it does not show unresolved maintenance work.
The repository has zero stars and forks and one watcher. Popularity is not required for a healthy small package, but these figures provide little supporting evidence of community adoption or oversight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/assert Version ^1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.