Poppins for composer.
58%
Total Score
caution
Usable with caveats: no releases or commits since August 2021 indicate a dormant project.
The repository is owned by an individual rather than an organization, so the one-person registry maintainer base offers limited visible backing for long-term upkeep.
This is a single-release package, and its only release was about 5 years ago with no releases in the last 12 months. That may be acceptable for a static font bundle, but it provides little evidence of ongoing maintenance.
There were no commits and no active maintainers in the last 3 months, consistent with a project that has been dormant since its initial publication.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide no additional community or maintenance signal.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency gap for a small static asset repository.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.