The package has a declared MIT license and a Composer build, but little supporting project hygiene. Pinning a specific version is prudent because the project shows no recent maintenance activity.
38%
Total Score
25
75
75
The latest release was in June 2021, over five years ago, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.
One registry maintainer is a thin publishing base, though the linked repository is owned by the same individual, so this is a moderate resilience concern rather than a severe ownership mismatch.
The package has no README, tests, or changelog, but it includes release notes for this exact version and the repository uses GitHub Releases. The missing consumer documentation and tests remain a transparency and maintenance gap.
No security policy is present. This is a modest transparency gap for a package with no other security scanning tools reported.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.