The package includes tests, a usable README, a small dependency set, and no install-time scripts. Its MIT declaration and matching repository support transparency, but adoption would require accepting an unmaintained codebase with little evidence of ongoing support.
38%
Total Score
0
100
67
75
This is the only release, published in August 2018, and there have been no releases in the last 12 months. The long period without updates is strong evidence of abandonment risk.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the stale release history and providing no evidence of current maintenance.
The repository has zero stars, forks, and watchers, so there is no visible community adoption to compensate for the lack of maintenance. Popularity is supporting evidence only, and this does not independently determine the score.
Composer build tooling is present, but no security scanning tooling was detected. This is a hygiene gap that adds little evidence of supply-chain oversight, without outweighing the stronger maintenance concern.
The repository is not archived, which is a positive counter-signal, but it was last pushed in August 2018 and has not shown recent maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.