The package has a long release history, tests, release notes, a matching repository, and a clear Apache-2.0 license. Its source repository has had no commits in three months, and the registry marks the package abandoned in favor of gdbots/pbj.
42%
Total Score
50
79
50
Packagist marks the entire package abandoned and names gdbots/pbj as its replacement. This is a major adoption risk despite the repository remaining available.
The project has existed for about 11 years with 47 releases, but only one release appeared in the last 12 months. Its long history helps, while the current cadence suggests slowing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last three months. That indicates no recent maintenance capacity, although the release was still published about eight months ago.
The repository has no security policy. This is a transparency and maintenance gap, though it is secondary to the explicit package abandonment finding.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.11 || ^0.12 | — | — |
ramsey/uuid Version ^4.7 | — | — |
beberlei/assert Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.