The MIT declaration, focused six-file tree, and usable README keep the package easy to inspect. Its single maintainer and lack of security tooling leave little resilience if issues emerge.
38%
Total Score
50
100
83
88
One registry maintainer is reasonable for a small user-owned project, but it provides little capacity or succession if the sole maintainer becomes unavailable.
The latest release was in June 2016, and there have been no releases in roughly 10 years. Six total releases show an initial publishing history but no current maintenance.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the long period since the last release and raising abandonment risk.
The repository has one star, zero forks, and one watcher. Low popularity is only supporting evidence, but it offers little community signal to offset the lack of maintenance.
Composer is used as the build tool, but no security scanning tools are present. This is a modest hygiene gap rather than a severe supply-chain concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.