Documentation, tests, licensing, and organization backing are all in place. Its small dependency footprint and lack of install-time scripts reduce adoption friction, but do not offset the maintenance concern.
42%
Total Score
67
88
75
The last release was over 8 years ago, with no releases in the past 12 months. The earlier 16-release history shows the package was once active, but does not offset the prolonged silence.
The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the release gap and increasing abandonment risk.
There were no new or closed issues or pull requests in the past month, while 6 issues remain open. This indicates little current project attention.
The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
krak/cargo Version ^0.2.3 | — | — |
nikic/iter Version ^1.4 | — | — |
krak/invoke Version ^0.1.0 | — | — |
peridot-php/leo Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.