The package is small and easy to inspect, with a clear license, README, and minimal runtime dependency. Its only two releases arrived in December 2021, with no commits in the last three months and no security scanning, so future compatibility and fixes are uncertain.
43%
Total Score
0
69
75
Only two releases exist, both published on December 14, 2021, and there have been no releases in the last 12 months. This long period without a release materially raises abandonment and compatibility risk.
The repository had zero commits and zero active maintainers in the last three months. Combined with the old final push, this is strong evidence that fixes and compatibility updates may not be forthcoming.
The repository has zero stars and forks and only two watchers, offering little independent evidence of active use or community support. Popularity is supporting evidence, so this reinforces but does not determine the maintenance concern.
Composer is used for the build, providing basic ecosystem tooling, but no security scanning tools are configured. The missing scanning is a maintenance-quality gap rather than evidence that the package is malicious.
The linked repository is not archived, which leaves a formal path for maintenance. Its last push was on December 14, 2021, so the non-archived status does not offset the evidence of inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.