The package is small and focused, with a clear README, direct repository match, and no install scripts. Its single maintainer, absent tests, and lack of security tooling leave limited evidence for ongoing support.
52%
Total Score
50
100
78
88
The latest release was published in January 2014, with no releases in the last 12 months. This long period without releases materially raises abandonment risk, although the package has a stable 1.1.2 version.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push in January 2014. This is the strongest evidence that the project is effectively dormant.
Only one registry maintainer account is listed. For a user-owned project this is plausible, but it leaves limited redundancy if the maintainer is unavailable.
The repository has 3 stars, 2 forks, and 1 watcher, indicating a very small user and contributor footprint. Low popularity is supporting evidence rather than a verdict, but it provides little external maintenance confidence.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. For this small, old package that is a hygiene gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.