The repository contains only four files and has no security policy, limiting evidence of mature project practices. MIT licensing, a stable version, no deprecation, and an organization-owned repository provide some reassurance, but this release is too old for a new dependency.
42%
Total Score
75
100
67
67
The latest release was published in August 2016, about 10 years ago, and there have been no releases in the last 12 months. Only three releases provide limited evidence of sustained maintenance.
The package and repository each contain only four files, consisting of Composer metadata and two source files. This may be appropriate for a small test helper, but it leaves little visible evidence of documentation or broader project maturity.
The artifact includes tests and the repository also reports tests, but it has no README or changelog. The missing README reduces consumer guidance, while missing changelog files are normal for published artifacts and not independently concerning.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with an inactive project, although the lack of backlog is not itself a defect.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful community backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.