The package is a very small, clearly licensed library with no install-time scripts. Its missing security tooling and minimal documentation provide little additional assurance for a dependency that has not evolved.
42%
Total Score
0
75
83
This is the package's only release, published about five years ago, with no releases in the last 12 months. That strongly suggests abandonment rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
The artifact has no README, but tests and changelog files are not expected in published PHP artifacts. The missing consumer documentation is still a minor transparency gap for a library.
Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.
The repository has no security policy, reducing transparency about vulnerability reporting and handling. This is a secondary concern for a small, inactive library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.