Clear documentation and broad automated coverage improve day-to-day confidence. The single registry maintainer, concentrated commits, and missing license leave modest continuity and legal clarity concerns.
79%
Total Score
67
88
50
No license declaration, license file, or detected repository license was found, leaving the release without clear reuse terms.
The package runs post-autoload-dump and pre-update-cmd scripts, which add install and update behavior that consumers should understand, but this is not severe on its own.
The package and repository are owned by an individual account rather than an organization, so the concentrated contributor activity offers less organizational handoff capacity.
Three contributors were active, but the primary contributor made 13 of 15 commits, so maintenance remains substantially concentrated.
Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and hygiene gap rather than an abandonment signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
sokil/php-isocodes Version ^4.1 | — | — |
symfony/translation Version ^6.4|^7.0|^8.0 | — | — |
sokil/php-isocodes-db-i18n Version ^4.0 | — | — |
giggsey/libphonenumber-for-php Version ^8.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.