The package is well documented, licensed, and has a substantial source tree with tests and a changelog. Its source repository has no recent activity, and the repository does not identify or mention this package, making maintenance and provenance difficult to establish.
35%
Total Score
33
100
56
83
Although the package has existed since 2014 with 18 releases, it has had no release in roughly six years and none in the last 12 months, indicating likely abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, with the latest push dating to 2020, which is a strong abandonment concern.
The linked repository name does not match the package name and its README does not mention the package, raising a provenance concern that this repository may not actually belong to the published release.
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the thin maintenance evidence.
There were no new or merged pull requests and no issue activity in the last month; this supports the broader evidence of an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpoffice/common Version ^0.2.9 | — | — |
zendframework/zend-escaper Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.