It has an MIT license, a clear README, and a matching source repository. The narrow dependency footprint and release notes help, but ongoing maintenance should be treated as uncertain.
44%
Total Score
75
100
79
100
The package has 20 releases since September 2017, but none in the last seven years; the latest was published in October 2019. This is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers during the last three months, consistent with the long gap in registry releases. The repository is not archived, but current maintenance is still unproven.
The repository uses Composer build tooling, which fits the package ecosystem, but it has no reported security-scanning tools. This is a minor hygiene gap rather than a decisive health concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.