The project has a long history and the release includes notes for a concrete PHP compatibility fix. A missing security policy, one registry maintainer, and unpinned workflow actions leave meaningful maintenance and build-hygiene gaps.
68%
Total Score
63
100
94
75
Only one account has registry publish access. That may be ordinary for a user-owned project, but it leaves a thin publishing base and increases single-person continuity risk.
This is a mature package first released over 13 years ago with 39 releases, but it had no registry release in the last 12 months. The repository was pushed more recently, partly compensating for the slower release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, indicating that active development has currently paused despite the recent push and release history.
There is only one open issue and no recent issue or pull-request activity. This is not severe by itself, but it provides little evidence of active community maintenance.
No repository security policy was found, leaving vulnerability reporting and disclosure expectations undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.