The repository has two stars, one fork, no security scanning, and no tests. It is not deprecated or archived, and the package has a usable README and MIT declaration.
38%
Total Score
50
100
69
75
This is a single-release package first and last published in January 2019, with no releases in the past 12 months. That long period without updates is a substantial abandonment concern.
There have been no new or closed issues in the past month, and one pull request remains open. This offers no evidence of active maintenance, although the small project size limits how much can be inferred.
The repository has only 2 stars, 1 fork, and 0 watchers, providing little evidence of broad community use or review. Popularity is supporting evidence, so this is a secondary concern rather than the main verdict.
Composer is used for builds, but no security scanning tools are present. For a package handling token-related API operations, the missing scanning is a meaningful hygiene gap.
The linked repository is not archived, which avoids the strongest abandonment signal, but its last push was in January 2019 and does not offset the prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.