The package includes a useful README, documentation, tests, and a clear MIT declaration. Its workflow uses six unpinned actions, and the project has no security policy or automated security scanning; pin 0.13.0 if adopting it.
57%
Total Score
75
79
75
The package has 22 releases over more than 13 years, but none in the last four years and the latest release was in August 2022. This is meaningful abandonment risk for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long gap since the latest release.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent even though the repository is under the matching organization.
Composer build tooling is present, but no security-scanning tools were detected. For a small library this is a hygiene gap that adds to the maintenance concerns.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a moderate governance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
internations/solr-utils Version ~0.8 | — | — |
lstrojny/functional-php Version ~0.1|~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.