Usable with caveats: the package is MIT-licensed, backed by a matching organization repository with tests, and is not deprecated or archived. However, it has had no release in nearly three years, no recent commits, and provides no README for users.
62%
Total Score
75
100
69
75
The published artifact has no README, which makes a small library harder to evaluate and integrate; repository tests partly compensate by showing that the project is tested.
There have been six releases since September 2021, but none in the last 12 months and the latest release was in October 2023, indicating a long period without published maintenance.
The repository had zero commits and zero active maintainers in the preceding three months, which is a meaningful maintenance concern for future fixes and updates.
The repository has no stars or forks and only one watcher, indicating limited external adoption; this is supporting caution rather than a decisive problem for a small utility package.
Composer build tooling is present, but no security scanning tooling was detected; this is a transparency and maintenance gap, though it is not evidence of a defect by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.