Its clear README, complete tests, MIT license, and zero runtime dependencies make this small library easy to inspect and integrate. Limited project hygiene evidence adds uncertainty around future maintenance.
38%
Total Score
0
100
69
83
The package has had only two releases, both in February 2016, with no release in more than 10 years. This strongly indicates abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in February 2016. The long inactivity materially lowers confidence in ongoing maintenance.
The repository has only 2 stars and no forks, indicating limited adoption evidence. Popularity is supporting evidence rather than a verdict, so this modestly reinforces the maintenance concern.
Composer build tooling is present, but no security scanning tools were found. This is a modest project-hygiene gap, especially for a package that has not been maintained recently.
The repository is not archived, which is a small compensating signal, but its last push was in February 2016 and does not offset the prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.