Its four-file artifact has no README, tests, or changelog, and the repository has no security scanning or policy. It has no install-time scripts and only two runtime dependencies, which limits operational exposure.
35%
Total Score
50
100
67
75
The package has released only once, with its sole release more than 11 years ago and none in the last 12 months. This is strong evidence of abandonment risk, with no newer release activity to compensate.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long-standing release gap. This materially lowers confidence in ongoing maintenance.
The published artifact has no README, tests, or changelog; missing tests and changelog are normal for published artifacts, but the absent README makes integration and consumer understanding harder for this library.
The repository has 0 stars and 0 forks, providing little supporting evidence of active adoption or community review. Popularity is only supporting evidence, so this is a caution rather than the primary concern.
The repository has no security policy and no policy file was detected. For a small, inactive package this is a transparency gap, although it does not by itself establish a security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ~1.0 | — | — |
mindweb/resolve Version 1.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.