The package contains a usable README and a self-contained PHAR, with no install-time scripts. Its ISC license and non-deprecated status help, but this old tooling offers little evidence of ongoing support.
35%
Total Score
25
70
50
The latest release was about 10 years ago, with no releases in the past year and only six releases overall. This is strong evidence of an unmaintained dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and raising abandonment risk.
Only one registry publisher is listed, and the repository owner is an individual rather than an organization. This leaves limited visible maintenance capacity, especially alongside the lack of recent activity.
Composer is used for the build, which is appropriate, but no security scanning tools are present. For a package distributing an executable PHAR, that reduces transparency around artifact checks.
The repository has no security policy. This is a transparency gap, although the package's small, apparently self-contained artifact limits the significance compared with an actively developed library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.