The package is clearly licensed, documented, and backed by a matching organization repository with repository tests. Its low adoption and absent security policy leave less evidence for long-term resilience.
67%
Total Score
67
100
83
83
The repository recorded no commits and no active maintainers in the last three months. This is a meaningful recent-maintenance gap, although the release history shows activity over the last year.
There were no new or merged pull requests in the last month and no new or closed issues; this is limited evidence of current community activity, but the open-issue count is unknown.
The repository has 4 stars, 0 forks, and 2 watchers, providing little evidence of broad external review or adoption; popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance concern.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
composer/installers Version ^1.12 || ^2.0 | — | — |
ingenerator/kohana-core Version ^4.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.