The package has tests, documentation, a changelog, and a clear MIT license. Its organization-backed repository is not archived, but no commits or releases have appeared since October 2020, making long-term maintenance a substantial concern.
45%
Total Score
50
69
50
The package has six releases but none in the last 12 months; the latest release was published in October 2020, nearly six years ago. This strongly increases abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the latest push being in October 2020. This is the strongest evidence of stalled maintenance.
There has been no issue or pull-request activity in the last month, and one issue remains open. This offers no evidence of current maintenance or support.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of sustained use or review.
The repository uses Composer, but no security-scanning tools are configured. This is a modest transparency and maintenance gap, though it does not outweigh the clear inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0.0 | — | — |
psr/container Version 1.0.0 | — | — |
psr/http-message Version 1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.