The package is small but well-scaffolded, with an MIT license, tests, a README, and only one runtime dependency. Its long release gap and absent recent commit activity make future fixes and compatibility work uncertain.
58%
Total Score
50
100
88
75
The latest release was in June 2018, with no releases in the past 12 months; this materially raises abandonment and compatibility risk. The repository is not archived, which partly offsets the concern.
There were zero commits and zero active maintainers in the past three months, indicating no recent maintenance capacity. The repository's non-archived state is a limited compensating signal.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. This is a modest hygiene gap rather than a severe dependency risk.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. The small dependency surface reduces exposure but does not replace a reporting process.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.