The stable API, minimal dependencies, matching repository, and Apache-2.0 licensing reduce adoption friction. However, the project shows no recent maintenance or release activity, making future fixes and compatibility support uncertain.
42%
Total Score
25
100
69
83
The latest release was published in October 2020, and there have been no releases in the last 12 months. Five releases over roughly six years indicate a largely dormant release history.
The repository recorded zero commits and zero active maintainers in the last three months; together with its last push in October 2020, this is strong evidence of abandonment risk.
The package and repository are owned by the same individual account, so the source appears aligned with the package rather than backed by an organization. This offers limited redundancy if that maintainer stops working.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of an active user or contributor base.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.