It has clear licensing, tests, release notes, and an organization-backed repository. The long period without releases or commits, along with minimal adoption and no security policy, makes future maintenance uncertain.
55%
Total Score
75
100
83
75
The latest registry release was on August 22, 2023, with no releases in the past 12 months. That roughly three-year release gap lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, reinforcing the roughly three-year inactivity visible in the release history.
There are no open issues or pull requests and no recent activity. While this may indicate a quiet project rather than unresolved problems, it offers no evidence of active community maintenance.
The repository has only 1 star and 1 fork, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides little evidence of a broad user or maintainer community.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.26 | — | — |
psr/simple-cache Version ^1.0 | — | — |
laminas/laminas-hydrator Version ^4.1 | — | — |
helicon/object-type-parser Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.