Its small codebase has a clear README, MIT licensing, no install-time scripts, and a straightforward Composer build. The lack of tests, security scanning, and a broader maintainer base leaves more upkeep risk than a mature library.
62%
Total Score
50
100
78
83
Only one registry maintainer is listed, and the project is user-owned rather than organization-backed. That creates some continuity risk if the maintainer becomes unavailable.
The artifact includes a README that documents its purpose and PHP requirement. Tests and a changelog are absent, which is normal for the published artifact; the repository also reports no tests, leaving limited verification evidence.
Only 3 releases have been published across about 5 years, with none in the last 12 months and a median interval of about 710 days. The latest release is recent, but the overall cadence is sparse.
There were 0 commits and 0 active maintainers in the last 3 months. Together with the sparse release history, this lowers confidence in active maintenance.
The repository has 1 star, 0 forks, and 1 watcher. This is limited supporting evidence, but popularity is not decisive for a small stable library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mistic100/randomcolor Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.