Its license and README are present, and the dependency surface is minimal. The project has little adoption and no recent maintenance evidence, so future fixes and compatibility work are uncertain.
40%
Total Score
25
100
72
83
The package has only one release, published about 9 years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained release line.
There have been no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive since 2016.
The package and repository are owned by the same individual account, providing clear ownership, but no organizational backing is shown to compensate for the thin maintenance base.
The repository has 1 star, 0 forks, and 1 watcher, indicating very little external adoption or community support. Popularity is supporting evidence, but this reinforces the maintenance concern.
Composer is used for building, which fits the package ecosystem, but no security scanning tools are present. For this small package that is a minor hygiene gap rather than a decisive risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.