The package includes tests, a changelog, and a clear MIT license. Its dependency surface is tiny and it has no install-time scripts, but security tooling and a security policy are absent.
38%
Total Score
0
100
64
75
This is the only release, published in October 2014, with no releases in the last 12 months; the package has had no demonstrated release maintenance for roughly 12 years.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance.
One star and no forks provide little evidence of community adoption or external review, reinforcing the concern created by the inactive release and commit history.
The project uses Make and Composer, showing some build structure, but it has no security scanning tools, which is a modest transparency and maintenance gap.
The repository is not archived, which preserves a path for maintenance, but its last push was in December 2014 and does not offset the observed inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.