The stable major version, focused six-file artifact, and lack of install-time scripts reduce adoption friction. Organization backing and a matching repository help, but no security policy or scanning limits transparency.
58%
Total Score
75
88
75
The package has 41 releases since December 2016, but none in the last 12 months and its latest release was in July 2022. This long period without a new release lowers confidence in ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since July 2022. This is a meaningful abandonment concern despite the repository not being archived.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and maintenance-hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This modestly reduces project transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.