The package is clearly licensed, has a readable artifact, and uses no install-time scripts. Organization backing and a non-archived repository help, but limited project hygiene provides little evidence of ongoing care.
43%
Total Score
50
67
83
The package has only one release, published over eight years ago, with no releases in the last 12 months. That strongly suggests abandonment despite the absence of a registry deprecation.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
No security policy was found in the repository, leaving vulnerability reporting and maintenance expectations undocumented. The package's small scope limits the significance but does not remove the gap.
Version 0.1.0 is not a stable major release, adding compatibility uncertainty; the lack of later releases means there is no evidence that this early API matured.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
consolidation/robo Version ^1.0.0 | — | — |
imi/database-helper Version ^0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.