The package is small and well-scaffolded, with tests, a usable README, and no install-time scripts. Its narrow maintainer base, absent security policy, and minimal repository activity leave maintenance capacity uncertain.
58%
Total Score
67
100
78
88
Only two releases were published, both in January 2017, with no release in more than nine years. This is substantial evidence of inactivity for a maintained dependency, despite the package remaining stable.
Only one registry account has publishing access. The organization-backed repository partly compensates for this, but the observed publishing base is still thin.
There are no open issues or pull requests and no recent activity. This is not inherently negative for a small stable library, but it provides no evidence of active maintenance.
The repository has two stars, zero forks, and one watcher. Low popularity is only supporting evidence, but it offers little community signal to compensate for the lack of recent releases.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hylianshield/alphabet Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.