The ten-file codebase has no tests, changelog, or README, and security tooling is absent. MIT licensing and no install scripts reduce adoption friction, but the one-person project offers little evidence of support.
38%
Total Score
25
50
57
67
This package has only one release, published 845 days ago, with no releases in the last 12 months. That is strong evidence of an inactive project, though the repository is not archived.
There were zero commits and zero active maintainers in the last three months. Combined with the single historical release, this indicates little current maintenance capacity.
Nine runtime dependencies create a relatively broad dependency surface for this small package, increasing compatibility and maintenance exposure. No development dependencies are present to demonstrate a maintained test or build setup.
Only one registry maintainer is listed, and the project is backed by a user-owned repository rather than an organization. A single maintainer can be sufficient, but it leaves limited visible support capacity.
The artifact contains only 10 files and a small source tree, with no visible documentation or test structure. A compact implementation can be healthy, but here it provides little evidence of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-ds/php-ds Version ^1.5 | — | — |
symfony/process Version ^6.4 | — | — |
league/flysystem Version ^3.0 | — | — |
vlucas/phpdotenv Version ^5.4.1 | — | — |
illuminate/console Version ^9.21|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.