Usable with caveats, but maintenance appears dormant: this is a small, single-release project with no commits in the last three months. It is clearly packaged, licensed, linked to a matching repository, and not deprecated or archived, but its limited activity and lack of security policy reduce confidence for long-term dependency use.
54%
Total Score
67
100
78
90
Only one registry maintainer account is listed. Because the project is user-owned and the repository identity matches, this is understandable, but it leaves limited apparent redundancy if that maintainer stops responding.
The package has only one release, published about 647 days ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance, although a small stable tool may not need frequent releases.
There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is the clearest sign of dormant maintenance.
The repository has only 2 stars, 0 forks, and 1 watcher, offering little supporting evidence of broad adoption or external review. Low popularity is not by itself a failure for a small utility.
Composer build tooling is present, but no security scanning tools are configured. For this very small repository that is a hygiene limitation rather than severe evidence of unsafe maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.