Its single pthreads runtime dependency and absent security tooling add compatibility and maintenance concerns. The license, README, and matching repository improve transparency, but do not offset the long period without development.
38%
Total Score
0
50
83
50
The latest release was published in December 2014, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment risk for a dependency still being adopted today.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in December 2015. The repository is not archived, but its observed activity is effectively dormant.
The package has one runtime dependency, ext-pthreads, which keeps the dependency graph small but ties consumers to a specialized runtime extension and can limit compatibility with current PHP deployments.
The repository has no security policy. This does not establish a vulnerability, but it reduces transparency about how consumers should report and receive fixes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.