The package has tests, a substantial README, release notes, and a matching organization-owned repository. Its very small release history, inactive repository, and missing security policy leave little evidence of ongoing support.
12%
Total Score
50
58
75
Only two releases exist, and there have been no releases in the last 12 months; the latest release was on September 23, 2021. This provides strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the archive status, this indicates no ongoing development capacity.
The linked repository is archived, with its last push on September 23, 2021. Archived source is a severe abandonment risk for a dependency that may need fixes or compatibility updates.
The repository has no security policy. For an archived package this is an additional transparency and support gap, although it is less significant than the lack of maintenance itself.
The assessed version is 0.1.0 and is not a stable major release. The README also describes the project as under active development and not ready for production, which limits confidence in its API maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
marcj/topsort Version ^2.0 | — | — |
dusank/knapsack Version ^10.0 | — | — |
phpunit/phpunit Version ^9.5 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
symfony/event-dispatcher Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.