The package is clearly licensed and documented, with a matching source repository and minimal runtime dependencies. Its maintenance has effectively stopped since February 2018, leaving a long-term abandonment concern for a core serialization dependency.
38%
Total Score
50
100
78
50
The package has had only two releases, both in February 2018, and none in the past eight years. This strongly indicates that maintenance has stopped.
There were no commits and no active maintainers in the past three months, consistent with a project that has been inactive for over eight years.
There is one open issue, but no new or closed issues or pull requests in the past month. This provides no evidence of current maintenance.
The repository has zero stars and forks and only two watchers. Popularity is not decisive by itself, but these figures offer little supporting evidence of active use or review.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a hygiene gap, compounded by the project's long inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.