The package is small and focused, with tests, release notes, a matching repository, and a minimal runtime dependency. Its maintenance has gone quiet, and the workflow uses two unpinned actions without a security policy.
62%
Total Score
63
100
83
83
The repository recorded zero commits and zero active maintainers in the last three months, indicating that maintenance has currently gone quiet.
The package has only three releases over roughly 19 months, with one release in the last 12 months; this indicates a limited but not necessarily abandoned release cadence.
There are no open issues and only one open pull request, with no recent issue or pull-request throughput; this is a small caution but not evidence of severe neglect by itself.
The repository has 13 stars and one fork, showing limited adoption; this is supporting context only and does not outweigh the direct maintenance evidence.
Composer build tooling is present, but no security-scanning tool was detected, leaving automated security hygiene less visible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.