Usable with caveats: the package is clearly structured, licensed, tested, and not deprecated, but it has had no release in over nine years and its repository has not been pushed since January 2019. Depend on it only if its stable behavior fits your needs and you can accept limited ongoing maintenance.
58%
Total Score
100
100
69
83
The package has only two releases, both from January 2017, with no release in over nine years. This is strong evidence of a potentially abandoned project, although the stable 1.0.1 version reduces version-churn concerns.
The repository has five stars and two forks, indicating limited external adoption. Popularity is only supporting evidence, so this lowers confidence in community support without independently making the package unhealthy.
Composer is used as the build tool, but no security scanning tools are present. This is a modest transparency gap rather than a severe risk because the project has a small, understandable structure.
The repository is not archived, which preserves a path for future maintenance, but its last push was in January 2019 and does not offset the long release gap.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The small project structure partly limits the concern, but it remains a maintenance and transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hylianshield/base32-crockford Version ^1.0.1 | — | — |
hylianshield/number-generator Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.