The package includes tests, a useful README, and a small dependency surface. Its old alpha status and inactive project make long-term maintenance and compatibility uncertain.
35%
Total Score
50
100
64
83
Only two releases were published, with the latest about 12 years ago and none in the last 12 months. This strongly indicates abandonment risk despite the short early release interval.
There were no commits and no active maintainers in the last three months. Given the repository's age, this supports a sustained maintenance gap rather than a brief quiet period.
There were no new or closed issues or pull requests in the last month, and two issues remain open. This provides no evidence of current community or maintainer response.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, secondary to the much larger maintenance concern.
The repository is not archived, which is a positive counter-signal, but it was last pushed about 11 years ago. The stale repository still indicates that active maintenance has stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mathiasverraes/money Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.