No tests or security scanning leave changes hard to validate, while the tiny user base limits visible support. The MIT license, matching repository, and non-deprecated status reduce transparency concerns but do not offset the long inactivity.
38%
Total Score
0
72
75
This package has only one release, published about 9 years ago, with no releases in the last 12 months. That provides strong evidence of abandonment risk.
The repository recorded no commits and no active maintainers in the last 3 months, while its last push was about 8 years ago. This indicates sustained inactivity rather than a short pause.
The artifact includes a short README and a GitHub release, but the repository has no tests or changelog. The missing tests materially reduce confidence in this conversion library's correctness.
The repository has 0 stars, 1 fork, and 1 watcher, providing little evidence of a broad user or contributor community to support maintenance.
The project uses Composer build tooling, which supports reproducible package handling, but it has no security-scanning tools. The missing scanning is a modest maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.