The package is clearly licensed and includes practical README and recipe documentation. However, it has had no release or commit activity for about 10 years, with no tests, security policy, or current project activity to support ongoing maintenance.
42%
Total Score
25
72
75
The latest release was published about 10 years ago, and there were no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility updates.
There were no commits and no active maintainers in the last three months. Combined with the long release gap, this indicates the project is not being maintained.
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the inactive maintainer base.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful sign of current community support.
Composer is used for the project build, which fits the package ecosystem, but no security scanning tools are present. This is a modest transparency and maintenance gap, not a standalone severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.