The six-file package has a README, license, and no install-time scripts, keeping adoption simple. There are no tests or security-scanning tools, so regressions may be hard to catch.
38%
Total Score
64
75
This is the only release, published in January 2019, with no releases in the last 12 months. That long-standing lack of updates is strong evidence of abandonment risk, despite the stable 1.0.0 version.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broader support community.
Composer is used for the build, but no security-scanning tools are present. This is a maintenance and assurance gap, though it is less serious than the package's prolonged inactivity.
The repository is not archived, which is a modest positive, but its last push was in January 2019 and does not offset the prolonged inactivity shown by the release history.
No security policy is provided, leaving vulnerability reporting and response expectations unclear. This adds a transparency gap for a package that has otherwise seen little recent activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.