Its small, tested codebase has clear licensing and no install-time scripts. The repository is simple and directly matches the package, but security coverage is limited.
55%
Total Score
50
100
78
83
The repository is owned by an individual rather than an organization, so the project has no visible organizational backing to compensate for its narrow maintenance base.
The package has had four releases, but its latest release was in March 2018 and it has had no releases in the last 12 months, indicating a long maintenance gap.
There were zero commits and zero active maintainers in the last three months, consistent with an effectively dormant project and limited prospects for fixes.
The repository has two stars and no forks, offering little supporting evidence of broad community review or adoption; popularity is supporting evidence rather than decisive on its own.
Composer is used for the build, but no security scanning tools are present, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version >=3.3 | — | — |
limingxinleo/x-trait-common Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.