The README is usable, and the repository matches the package. Its limited four-file footprint and missing security tooling provide little evidence of engineering depth. Pin this only for low-risk use; the maintenance record warrants finding an alternative.
43%
Total Score
0
64
50
The package has made no releases in the last 12 months, and its latest release was nearly five years ago. Four releases clustered at the beginning show initial activity but no continuing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating likely abandonment.
The package contains only four files, including a single source file and a vendored dependency, which suggests a very small project with limited visible engineering structure.
The repository has zero stars and forks and only one watcher, providing little community evidence or support capacity. Popularity is supporting evidence rather than decisive on its own, but it reinforces the maintenance concern.
Composer is present as a build tool, but no security scanning tools are configured. This is a hygiene gap rather than proof of unsafe code, and the small project scope limits its weight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.