The package has a clear GPL-3.0 license, a matching repository, and a usable README for its narrow purpose. Pinning this release is difficult to justify because its package status and maintenance record indicate substantial abandonment risk.
35%
Total Score
50
100
64
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a serious warning for a dependency, even though the linked repository is not archived.
Only two releases were published, with the latest on March 18, 2021, and none in the last 12 months. This leaves the release with a long, demonstrated maintenance gap.
The repository recorded zero commits and zero active maintainers in the three months measured. A push on January 25, 2026 shows it is not fully dormant, but does not offset the current lack of activity.
The repository has zero stars and forks and one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of a broad user or contributor base.
The repository has no security policy. For a small library this is a modest transparency gap, but it is less significant than the package's deprecation and inactive release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.