The package is small and clearly packaged, with a README, MIT license, modest dependencies, and no install-time scripts. Its last release was in July 2022, with no releases in the past year and no security scanning or policy.
55%
Total Score
100
83
88
The package has 9 releases since October 2019, but its latest release was in July 2022 and it had 0 releases in the last 12 months. This long pause lowers confidence in ongoing maintenance.
The repository has 0 stars and 0 forks, indicating little visible adoption. Popularity is supporting evidence rather than a verdict, so this adds only a minor concern alongside the maintenance pause.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. For a small library this is a hygiene gap rather than a severe risk.
The repository has no security policy. This reduces disclosure transparency, though the small package scope limits the significance of the gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lum/lum-core Version ^3.0 | — | — |
lum/lum-compat Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.