The MIT license, useful README, repository tests, and package-matching source make its contents reasonably transparent. Its modest dependency set and lack of install scripts reduce routine integration risk.
10%
Total Score
0
100
50
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The package has only 3 releases, all concentrated in March 2016, with no releases in the last 12 months. This indicates long-term abandonment rather than a merely slow cadence.
There were no commits and no active maintainers in the last 3 months, consistent with the archived repository and abandoned registry status.
The linked repository is archived and was last pushed over 8 years ago, so active maintenance should not be expected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dandelionmood/lastfm Version 0.6.* | — | — |
jwilsson/spotify-web-api-php Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.