A usable README, tests, MIT licensing, and a small dependency set make the release understandable to adopt. The source is clearly tied to the package, with no install scripts or workflow findings.
38%
Total Score
33
100
81
83
The latest release was in May 2015, and there have been no releases in the last 12 months. This long publication gap is strong evidence of abandonment risk.
The repository had zero commits and zero active maintainers in the last 3 months, consistent with the release history and indicating no recent maintenance.
Only one registry account can publish the package, leaving a thin publishing base. The linked repository is user-owned, so there is no organization backing shown to compensate for that concentration.
There were no new or closed issues or pull requests in the last month, while two issues and one pull request remain open. This provides no evidence of current project activity.
The project has build tooling through Make, Composer, and Box, but no security-scanning tools are shown. The build setup is positive, while the missing scanning coverage is a modest hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
igorw/get-in Version ~1.0 | — | — |
symfony/yaml Version 2.5.3 | — | — |
docopt/docopt Version ~1.0 | — | — |
minime/annotations Version ~2.3 | — | — |
regex-guard/regex-guard Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.