Its tiny footprint and lack of security scanning leave less evidence of maturity than established libraries. The stable release, clear GPL-3.0 licensing, and matching repository make the package straightforward to evaluate, but maintenance activity is currently absent.
62%
Total Score
50
81
83
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, providing limited visible backing for long-term maintenance.
The package has only 3 releases over about 3 years, with a median interval of about 419 days and 1 release in the last 12 months; this indicates a slow maintenance cadence, though a recent release exists.
There were 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance; the recent push and release provide only partial compensation.
The repository has 0 stars and 0 forks, with 1 watcher; this offers little supporting evidence of broad review or adoption, although popularity is not required for a small stable package.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.