The source is compact, tested, and has a matching repository, while the MIT declaration and release notes improve transparency. No commits or releases have appeared for over a year, so future fixes are uncertain.
57%
Total Score
75
100
81
88
The package is 478 days old with 12 releases, but it has had no releases in the last 12 months; this indicates stalled maintenance for a dependency still below 1.0.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has zero stars, forks, and watchers, providing no community validation; this is supporting evidence only and does not outweigh the direct maintenance signals.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities, though this is a hygiene concern rather than evidence of an unsafe release.
The latest version is still below 1.0, which signals an immature API, although it is not marked as a prerelease and has no recent prerelease activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
nesbot/carbon Version ^3.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.