Risky to adopt: this package has had no release or repository activity since October 2019 and only one published version. It is small and transparent, with an MIT license and matching source repository, but the prolonged inactivity makes abandonment a significant concern.
35%
Total Score
25
64
83
Only one release exists, and the latest release was published in October 2019 with no releases in the last 12 months. This long period without updates is a significant abandonment concern.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no activity since October 2019.
The package has one registry maintainer. This is not inherently unhealthy for a user-owned project, but it leaves little visible publishing redundancy alongside the absence of recent activity.
The repository has one star, zero forks, and one watcher, indicating little community evidence to compensate for the lack of maintainer activity.
Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a transparency gap, though it is less serious than the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.