The repository includes tests, a changelog, and a matching source tree, with a clear Unlicense. Pin 6.6.21 instead; the release notes explicitly identify 6.6.23 as broken.
32%
Total Score
67
100
67
75
The package includes a README, tests, and a changelog, and the exact release has GitHub notes. However, those notes explicitly say this release is broken and recommend 6.6.21 instead.
The package has 15 releases but none in the last 12 months; its latest registry release was in November 2020. This indicates a long-standing maintenance gap.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the absence of recent registry releases.
There were no new or closed issues or pull requests in the last month, while 68 issues remain open. This suggests limited current project activity.
Composer build tooling is present, but no security-scanning tooling was detected. The build setup is established, while security automation is a minor gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pear/net_url2 Version ^2.1.2 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
sabberworm/php-css-parser Version ^8.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.