The five-file artifact has a clear README, an MIT declaration, and no install-time scripts. Organization backing and matching repository references help establish provenance, but compatibility with current PHP environments should be tested carefully.
40%
Total Score
50
100
79
83
The latest release was published in June 2017, and there were no releases in the following 12 months of the collected history; this is roughly nine years without a release and strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no current maintenance activity.
The repository has no security policy. For a package with no recent maintenance activity, this reduces transparency about how vulnerabilities would be handled.
Version v0.4.1 is not marked as a prerelease, but the package remains below major version 1, so its long period without updates provides limited evidence of ongoing compatibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kraken-php/util Version 0.4.* | — | — |
vlucas/phpdotenv Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.