The repository was pushed recently, which reduces abandonment concern despite the old registry release. No security policy is present, so project security practices are less transparent.
68%
Total Score
100
90
50
Only two releases were published, both on the same day, and none have appeared in over six years. The repository's recent push provides some evidence of ongoing project activity but does not establish a current release cadence.
The repository has no security policy, reducing transparency about vulnerability reporting and response practices. This is a modest concern rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mehr-it/php-decimals Version ^2.1 | — | — |
thecodingmachine/safe Version ^0.1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.