Documentation, licensing, tests, and release notes are solid, and the repository remains unarchived. Maintenance has slowed sharply, with no recent commits or releases; all nine workflow actions are unpinned and no security policy is present.
62%
Total Score
63
100
81
75
One registry publishing maintainer is consistent with the repository being owned by one user. It offers limited bus-factor resilience, but registry access alone does not establish whether maintenance is active.
The package has had no release in roughly three years, despite 11 releases overall. That suggests a slowing maintenance pace and raises abandonment concerns for a library that depends on an external public suffix list.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is meaningful evidence of slowing maintenance.
There are no new or closed issues in the last month and one open pull request. This indicates little current activity, though the small project size and zero open issues limit the concern.
The repository has three forks, one watcher, and no stars. Popularity is only supporting evidence, so the low counts modestly reduce external validation but do not determine health for a small library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-mbstring Version ^1.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.