The package includes a substantial README, tests, and a small runtime dependency set. Its organization-backed repository is not archived, but it lacks a security policy and recent maintenance evidence.
60%
Total Score
83
100
88
50
The package has 9 releases since March 2022, but none in the last 12 months and the latest release was about 3 years ago. This materially raises abandonment risk despite a previously regular release interval.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the repository's last push being about 3 years ago. This is direct evidence of stalled maintenance.
The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and maintenance weakness, not a severe risk on its own.
The linked repository has no security policy, leaving no documented process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version >=1.0 | — | — |
makinacorpus/profiling Version ^1.3 || ^2.0.1 | — | — |
makinacorpus/argument-resolver Version ^1.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.