The tiny five-file project has no README, which makes library integration harder, and provides no evidence of recent support. It is licensed and not deprecated, but maintenance transparency remains limited.
43%
Total Score
50
71
The artifact has no README, while tests and a changelog are normally repository concerns and are not expected in every published package. The missing README reduces consumer transparency for a library.
This is the only release, published about five years ago, with no releases in the last 12 months. That strongly limits evidence that the package is maintained.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has one star and no forks, offering little supporting evidence of broad community use. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.
Composer is used for the build, which is appropriate, but no security scanning tooling is present. This is a minor transparency gap alongside the stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.