The package has a clear README, an MIT license, a matching source repository, and no install-time scripts. Its one-person project has had no recorded releases or commits since 2015, leaving future compatibility and fixes uncertain.
39%
Total Score
25
71
83
This is the only release, published in February 2015, with no releases in the last 12 months. The stable version designation does not compensate for more than 11 years without a new release.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. This materially raises abandonment and compatibility risk.
The registry lists one maintainer, which is a thin support base for a package with no recent activity. The matching repository and project ownership provide some continuity but do not remove the bus-factor concern.
The repository has 10 stars, 0 forks, and 1 watcher, providing little evidence of broad community support or external maintenance capacity. Popularity is supporting evidence, so this reinforces rather than determines the score.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are present. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.