It includes tests, a usable README, an MIT license, and no install-time scripts. Pin v2.2.0 only if its unchanged behavior fits; expect no maintenance or security updates.
42%
Total Score
50
100
72
83
The package has had no release in nearly 10 years and none in the last 12 months; its six releases were concentrated in September 2016, indicating abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in 2016 and reinforcing abandonment risk.
One registry maintainer is consistent with a small user-owned project, but it leaves little visible maintainer redundancy when combined with the absence of recent activity.
Four stars and three forks show limited adoption. Popularity is supporting evidence rather than a decisive health measure, but it provides little evidence of community resilience.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap, especially for a project with no recent maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.