It has no declared or detected license, and the repository has no security policy. Its small dependency surface and included tests do not offset the maintenance risk.
8%
Total Score
100
33
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
The latest release was published in December 2017, with no releases in nearly nine years. This strongly indicates abandonment rather than merely a slow release cadence.
The linked repository is archived and was last pushed in December 2017, so it is no longer an active maintenance source.
The package has no declared license, detected license, or license file, leaving the legal terms for using the code unclear.
The repository has zero stars, forks, and watchers, offering no meaningful supporting evidence of adoption or active community oversight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.