It is easy to inspect and integrate, with a clear MIT license, tests, no runtime dependencies, and no install-time code. Pin this version if you accept the maintenance risk.
55%
Total Score
25
100
83
88
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent releases. This is the strongest evidence of current abandonment risk.
One registry maintainer account is consistent with the repository being owned by the same individual, but it also indicates a thin maintenance base with limited redundancy.
The package has six releases since April 2022, but none in the last two years; the latest release was in July 2024. This indicates materially slowed maintenance for a package still presented as a stable dependency.
The repository has zero stars and forks and one watcher, providing little external validation. Popularity is supporting evidence only, so this modestly lowers confidence rather than deciding the health score.
Composer is used as the build tool, but no security-scanning tools are reported. The missing scanning is a hygiene concern, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.