The small dependency surface and security policy are positives, while the sole maintainer and empty repository activity leave little evidence of ongoing support. The license mismatch and absent README add transparency and integration concerns.
38%
Total Score
25
38
50
The latest release was published nearly six years ago, and there have been no releases in the last 12 months. Nine releases arrived within about one day in October 2020, suggesting a short-lived project rather than sustained maintenance.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
The artifact includes an Apache-2.0 license file, but the manifest declares MIT. The release is licensed, yet the mismatch creates avoidable uncertainty about which terms apply.
The package has one registry maintainer, and the linked repository is owned by an individual rather than an organization. This leaves a thin support base, although maintainer count alone does not prove abandonment.
The published artifact has no README, tests, or changelog, while the repository also shows no tests or changelog. Missing tests and changelog are normal for a published artifact, but the absent README is a minor integration gap for a PHP library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.