The small codebase has tests, an MIT declaration, and organization backing, but its maintenance and security practices are dated. Pinning this version is safer than expecting dependable future updates.
38%
Total Score
100
100
72
83
The latest release was published in August 2016, with no releases in the last 12 months. Roughly 10 years without a release is strong evidence of abandonment risk.
The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of active adoption or a broad user community to surface and address problems.
Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a modest hygiene gap, not a severe risk by itself.
The repository is not archived, which is a positive, but it was last pushed in August 2016. The lack of source activity for roughly 10 years materially weakens the maintenance outlook.
No security policy was found. For a dependency that has had no visible activity for roughly 10 years, this leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mindy/helper Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.