The package is small and focused, with a README, tests, and a direct PHP-only runtime dependency. Its single maintainer and lack of security policy leave limited evidence of ongoing oversight; pin v0.1 if adopting it.
58%
Total Score
50
100
75
88
One registry maintainer is consistent with a small user-owned project, but it also indicates a thin publishing base and limited apparent continuity if that maintainer becomes unavailable.
This package has had only one release, on August 17, 2015, with no releases in the last 12 months. That strongly limits evidence of current maintenance, though the small scope may reduce the need for frequent releases.
The repository has 4 stars, 2 forks, and 1 watcher, providing little supporting evidence of broad community review or adoption. Low popularity is not decisive for a small focused package, but it offers little compensation for stale activity.
Composer is used as the build tool, providing basic project tooling, but no security-scanning tool was detected. For this small package that is a modest transparency gap, not a severe risk.
The repository is not archived, which preserves a path for maintenance, but it was last pushed on November 7, 2018. The long period without repository activity is a meaningful abandonment concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.