The package is small, clearly MIT-licensed, and has no install-time scripts. Its single-user ownership, minimal repository activity, and lack of security tooling make long-term maintenance and oversight uncertain.
52%
Total Score
50
61
83
The package has five releases but none in the last 12 months; its latest release was on December 5, 2021, indicating several years without a new release.
The repository is not archived, but its last push was on December 5, 2021, so the unarchived status does not offset the long period without observed activity.
Only one registry account has publish access, leaving little visible publishing redundancy for a package that has already gone several years without a release.
The artifact has no README, tests, or changelog, but the package tree is very small and the absence of tests and changelog is normal for published Composer artifacts; the missing README is a minor consumer-documentation gap.
The repository is owned by an individual user rather than an organization, so there is no provided evidence of institutional backing to compensate for the thin maintenance footprint.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.