The README, MIT license, and matching repository make the package easy to inspect and integrate. Maintenance is the main concern: releases stopped about seven years ago, with no commits in the last three months. Pin this version only if its old PHP behavior fits your needs.
62%
Total Score
50
90
50
The package has 9 releases, but none in the last 12 months and the latest was about seven years ago. This is the strongest maintenance concern, although the long release intervals suggest it may be a small, stable library.
The repository recorded no commits and no active maintainers in the last three months. The repository was pushed more recently than the last registry release, but current development activity remains limited.
No security policy was found in the linked repository. For a small library this is a transparency gap rather than a severe risk, but it leaves vulnerability-reporting expectations unclear.
The workflow audit completed fully with no dangerous triggers or audit findings, and job-level permissions are used. Its only analyzed action reference is unpinned, which is a modest reproducibility concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.