This release is usable but carries meaningful maintenance and maturity concerns. The package has a clear MIT license, a substantial artifact, repository-backed tests and changelog, regular recent releases, and no deprecation or archive status. However, it remains on an unstable 0.x major version, the repository shows no commits or active maintainers in the last 3 months, has very limited popularity, and lacks security scanning and a security policy. The recent registry release cadence is reassuring but does not fully offset the apparent drop in repository development activity, so developers should depend on it with version pinning and review its ongoing maintenance before adopting it broadly.
68%
Total Score
67
100
83
88
The repository recorded zero commits and zero active maintainers during the last 3 months, a material sign that development activity may have slowed or become dormant.
There are two open issues and no recent issue or pull-request activity, leaving limited evidence of active user support or maintenance response.
The repository has only 10 stars, 10 forks, and 3 watchers. Low popularity is supporting evidence rather than a verdict, but it provides little external assurance or bus-factor resilience.
Make and Composer build tooling are present, but no security scanning tools are configured, leaving a security-hygiene gap.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/protobuf Version ^4.31.1 || ^5.34 | — | — |
symfony/process Version ^6.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.