A composer.json and lockfile parser.
58%
Total Score
50
100
90
100
One registry maintainer is consistent with a small individual project, but it leaves little visible publishing capacity if that maintainer becomes unavailable.
The latest release was about seven years ago, with no releases in the past 12 months. This is a meaningful maintenance concern, although the linked repository is not archived and was pushed more recently.
There were no commits or active maintainers in the past three months, indicating no current development activity. The repository's more recent push history provides only limited compensation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.