The small dependency surface and matching repository make the package straightforward to inspect. Missing security scanning adds uncertainty, while the available README and MIT license provide basic consumer transparency.
43%
Total Score
0
100
71
75
The latest release was on November 29, 2021, and there were no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. No other provided maintenance signal offsets this inactivity.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community adoption or a backup maintenance base. Popularity is supporting evidence rather than decisive on its own.
Composer build tooling is present, but no security scanning tools were detected. The build setup is a modest positive, while the missing scanning coverage leaves a maintenance and vulnerability-management gap.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.