The package is small, coherent, and has a clear README with one runtime dependency. The linked project has no security policy or scanning, so there is little evidence of ongoing review.
48%
Total Score
50
100
69
83
The package has had no release in more than 8 years: its latest release was in October 2017, with zero releases in the last 12 months. Its small, stable scope partly limits the impact, but the prolonged inactivity is a real maintenance concern.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is consistent with a dormant project, although the package's narrow scope may require little discussion.
The repository has modest adoption signals with 8 stars and 4 forks. This provides limited supporting evidence and does not offset the long period without updates.
Composer is used for the build, which fits the ecosystem, but no security scanning tools are configured. For a small library this is a hygiene gap rather than a severe risk.
The repository is not archived, so it remains available to maintainers and consumers. Its last push in October 2017 is consistent with the separate maintenance concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.