The package is a very small wrapper with minimal consumer documentation. Its stable version and clean install profile are positives, but the source has had no activity since 2016 and lacks both a license and security policy.
38%
Total Score
25
69
75
This is the only release, published in April 2016, with no releases in the last 12 months; the package has been dormant for over 10 years.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for over 10 years.
No declared license, license file, or repository license file was detected, leaving the legal terms for reuse unclear.
Only one registry maintainer is listed, and the project is user-owned rather than organization-backed, leaving limited visible publishing redundancy.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap for a dependency published to others.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.