The package has a clear license, tests, documentation, and minimal runtime dependencies. Its release history is very short, with no registry release for nearly seven years, and recent repository activity is absent, so future maintenance is uncertain.
58%
Total Score
50
100
78
88
Only two releases were published on the same day, and there have been no releases in nearly seven years. This materially weakens confidence in ongoing maintenance, despite the repository still existing.
There were zero commits and zero active maintainers in the last three months. Combined with the long release gap, this is a meaningful sign that active maintenance may have stopped.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This offers little evidence of active project response.
The repository has one star, two forks, and one watcher. Low adoption is not disqualifying for a small library, but it provides little evidence of a broad user or contributor base.
Composer build tooling is present, but no security scanning tools are configured. That is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.