The MIT license, matching repository, readable documentation, and stable version make the package straightforward to evaluate and integrate. Maintenance has largely stopped, with no registry release since December 2018 and no recent commits or issue activity, so future compatibility support is uncertain.
57%
Total Score
50
88
83
The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the available backing context but leaves limited visible redundancy.
The package has had no release in more than 7 years, despite 11 releases overall; this is strong evidence of stalled maintenance for a framework integration package.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that is not receiving ongoing maintenance.
There have been no new or closed issues or pull requests in the measured month, while several issues and pull requests remain open; this supports the broader maintenance concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap that is secondary to the maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.