The package has clear licensing, documentation, and a matching source repository. Its small project footprint, absent security policy, and recent lack of activity make long-term maintenance less certain.
60%
Total Score
50
100
81
88
Only one registry account has publish access. That is a limited publishing base for a user-owned project and increases continuity risk if that maintainer stops releasing.
The repository is owned by an individual account rather than an organization, so the single registry maintainer is not offset by visible organizational backing.
The package has 18 releases over roughly six years, but it has made no release in the last 12 months; this points to slowing or paused maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has recently gone quiet.
There are no open issues and one open pull request, but no issues or pull requests were created or merged in the last month; this provides little evidence of active collaboration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.