The two-file wrapper has a declared GPL-2.0 license and no install-time scripts. Its repository matches the package and has no workflow or dependency-install hooks, but provides little evidence of ongoing project care.
38%
Total Score
75
58
83
The package has only one release, published about 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency whose binary may need updates.
There have been no new issues, pull requests, or merges in the last month. For this tiny wrapper that may be normal, but it provides no evidence of active maintenance alongside the old release.
The repository has 0 stars and 0 forks, with 6 watchers. Low usage is supporting evidence rather than a verdict, but it offers little external indication of sustained adoption or review.
Composer is used as the build tool, showing basic project packaging discipline, but no security scanning tooling is configured. This is a minor transparency gap, not a severe risk for the tiny wrapper.
The linked repository is not archived, which preserves some possibility of future maintenance, but its last push was about 9 years ago and does not offset the stale release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.