The package is licensed, documented, and its repository remains available with a changelog. Its small user base and missing security policy provide limited assurance beyond the basic maintenance evidence.
60%
Total Score
50
63
50
Only one registry maintainer is listed. This is not proof of abandonment, but it leaves limited publishing and maintenance capacity when combined with inactive recent commits.
The package has three releases over about four years, with no releases in the last 12 months and the latest release about 18 months ago, indicating slow maintenance.
The repository recorded no commits and no active maintainers in the last three months, which weakens evidence that bugs and compatibility issues will be addressed promptly.
The repository has zero stars, two forks, and one watcher. Popularity is only supporting evidence, but these numbers provide little independent evidence of broad community adoption or review.
Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance gap rather than a severe risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
masroore/stopwords Version ^1.0 | — | — |
voku/portable-utf8 Version ^6.0 | — | — |
masroore/php-stemmer Version ^3.0 | — | — |
writecrow/lemmatizer Version dev-master | — | — |
soundasleep/html2text Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.