The package includes a substantial README, clear licensing, and no install-time scripts. Its young history and zero commits in the last three months leave maintenance capacity uncertain; the repository also has no security policy or scanning.
62%
Total Score
50
100
88
83
Only one registry account, Mr. April, can publish the package, leaving a thin publishing base. The repository owner is also a user account rather than an organization, so no broader backing is shown to compensate for that concentration.
The package is young at 194 days, with four releases concentrated early and no release since June 2, roughly four months before collection. This shows initial activity but limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, despite the release being collected about four months after its last push. This is the clearest abandonment concern.
Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy. For a library integrated into application code, this weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webman-tech/dto Version ^1.0 | — | — |
webman-tech/swagger Version ^2.1 | — | — |
zircote/swagger-php Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.