The alpha version and small project footprint limit confidence in long-term API stability. Clear licensing, tests, documentation, and repository alignment provide useful support, while workflow references remain unpinned.
57%
Total Score
67
81
67
The package has had no releases in the last 12 months, with the latest release nearly two years ago. Earlier releases were fairly regular, but the prolonged gap lowers maintenance confidence.
There were zero commits and zero active maintainers in the last three months, reinforcing the release gap and raising abandonment risk despite the repository remaining unarchived.
There were no new or closed issues or pull requests in the last month, while eight issues and five pull requests remain open; this suggests limited recent project activity.
The repository has 11 stars and no forks, indicating a small project footprint. Popularity is only supporting evidence, but the limited adoption provides little external maintenance signal.
The repository has no security policy, leaving vulnerability-reporting and response expectations unclear. This is a transparency gap, but not a severe dependency risk on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.16 | — | — |
spatie/regex Version ^3.1 | — | — |
halaxa/json-machine Version ^1.1 | — | — |
phpoffice/phpspreadsheet Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.