The two-file package has no README, tests, changelog, or security scanning, leaving little evidence for maintenance or consumer support. Organization ownership and a simple dependency profile provide some context, but do not offset the long inactivity.
38%
Total Score
50
100
71
The latest release was in October 2015, with no releases in the following 12 months or since; this is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly ten-year gap since its last recorded push.
The artifact contains no README, tests, or changelog, and the repository reports none either. For this small library, the missing consumer documentation and validation reduce transparency, though the package may be intentionally minimal.
Composer is used as the build tool, which is appropriate for this package, but no security scanning tools are present. That is a modest transparency and maintenance gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.