Consumers get little guidance for integrating this library, and its simple dependency profile does not offset the lack of project activity. Missing licensing leaves reuse terms unclear.
38%
Total Score
50
100
75
67
No declared license, license file, or repository license file was found. That leaves the legal terms for reuse unclear and is a meaningful adoption barrier.
The package contains only four files, including one source file and Composer metadata. This is consistent with a small example library, but it provides little evidence of mature documentation or broader project structure.
The artifact has no README, which limits integration guidance for a library; the absence of tests and a changelog is normal packaging practice and is not treated as a gap. The GitHub release infrastructure provides some project transparency, but its notes for this version are empty.
The package has only two releases, both on March 31, 2023, with no releases in the following three years and six months. This indicates a largely inactive project, though the absence of deprecation reduces the severity.
The repository recorded zero commits and zero active maintainers in the last three months, and its last push was March 31, 2023. No activity for about three years and six months is strong evidence of abandonment risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.