The small package is easy to inspect, with a README, tests, and a declared MIT license. Its simple dependency set and lack of install scripts reduce integration surprises, but do not offset the maintenance concern.
38%
Total Score
0
100
71
100
The package has only one release, published nearly 10 years ago, with no releases in the last 12 months. This is strong evidence of an effectively abandoned release line.
The repository has had zero commits and zero active maintainers in the last 3 months, consistent with the nearly 10-year-old release and indicating no current maintenance.
The repository uses Composer, but no security-scanning tooling is reported. This is a minor hygiene gap rather than the main reason for the low score.
Version 0.1.0 is not a stable major release, and no later version exists to demonstrate maturation or compatibility work.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aura/di Version ^3.2 | — | — |
jnjxp/event Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.