The package has a clear, small source tree, a stable major version, and no install-time scripts. Its MIT declaration and organization-owned repository improve transparency, but the lack of recent maintenance evidence leaves adoption dependent on a largely untested, inactive project.
58%
Total Score
75
83
83
This is the package's only release, published over two years ago, with no releases in the last 12 months. That suggests limited maintenance evidence for a dependency, though the small and focused scope may explain the low release count.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the one-release history and indicating no current maintenance activity.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
The repository has no security policy. That weakens the project's documented vulnerability-reporting process, although it does not by itself show abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hiraeth/app Version ^2.0 | — | — |
hiraeth/middleware-imp Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.