The package includes tests, release notes, a README, and a small runtime dependency surface. Its source repository has no security policy or security scanning, so maintenance and disclosure practices are limited.
58%
Total Score
50
100
81
83
There were no commits and no active maintainers in the last three months. Combined with the release history, this indicates that active maintenance has effectively stopped.
The registry and repository are owned by the same individual account, and the repository is user-backed rather than organization-backed. This is consistent ownership, but it also indicates a limited backing structure.
The latest release was published in May 2015, with no releases in the last 12 months and only two releases overall. This is strong evidence of an aging package, although the stable 1.1.0 release may still be sufficient for a mature, narrow library.
Composer is used for builds, but no security scanning tools are configured. The build tooling is appropriate, while the missing scanning is a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was in November 2015. The unarchived state is positive, while the old last-push date reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.