It has no declared or detected license, and the repository has no security policy or scanning. The small codebase and stable 1.0.0 release make it easy to inspect, but provide little ongoing support.
38%
Total Score
50
67
75
The package has made only one release, on December 13, 2016, with no releases in the last 12 months. That long absence of release activity is strong evidence of abandonment risk.
Neither the package nor its repository declares or contains a recognized license. This creates a significant transparency and adoption concern for a dependency.
Only one registry maintainer is listed, and the project is backed by an individual repository owner. This leaves limited visible continuity if that maintainer stops publishing.
The artifact and repository each contain only composer.json and src/Matrix.php. The minimal structure is easy to inspect, but it also confirms the absence of supporting documentation and tests.
The package has no README, tests, or changelog, although release notes exist for version 1.0.0. The release notes provide minimal documentation, but the missing README weakens consumer guidance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.