The repository has Composer build tooling but no security scanning, tests, or security policy. Its single maintainer and minimal six-file project leave little evidence of mature support for future changes.
42%
Total Score
50
67
83
The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, despite the stable 1.0.0 version.
The repository is not marked archived, but it was last pushed about 10 years ago, reinforcing the release-history evidence of inactivity.
Only one registry account has publish access. With no organization backing shown, this leaves a thin publishing and support base.
The linked repository is owned by an individual user rather than an organization, and no broader project backing is shown. That increases reliance on a single maintainer.
There are no open issues or pull requests and no recent activity. While a quiet issue tracker can be healthy, here it is consistent with the long period without releases.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.