The MIT license, matching repository, clear README, and repository tests make the package transparent to inspect. Its organization backing and lack of deprecation partly offset the very old maintenance record.
58%
Total Score
50
75
50
The latest release was about 7 years and 5 months ago, with no releases in the last 12 months. This is strong evidence of inactivity for a dependency, despite a history of 17 releases.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and indicating little current maintenance capacity.
There were 2 open issues but no new or closed issues and no pull-request activity in the last month. This reinforces the picture of an inactive project, though the small issue count limits the concern.
The repository uses Composer for builds, but no security-scanning tooling is reported. The missing scanner is a modest hygiene concern, not evidence that the package is unsafe by itself.
The repository has no security policy. This is a transparency gap, although the package is small and other provided signals show a matching source repository and a declared MIT license.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hhvm/hsl Version ^4.1 | — | — |
hhvm/hhvm-autoload Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.