Its MIT license, tests, small dependency footprint, and clear repository make the package straightforward to evaluate and integrate. Maintenance appears dormant, so future compatibility and issue response are uncertain.
62%
Total Score
50
100
83
83
The package and repository are owned by the same individual account, so ownership is clear, but there is no organization backing to broaden maintenance capacity.
The package has had 6 releases since May 2018, but none in the last 4 years; the long release gap indicates inactive maintenance rather than active development.
There were no commits and no active maintainers in the last 3 months, consistent with the multi-year release gap and indicating dormant maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. This is supporting evidence of limited adoption, but popularity alone does not make a small stable package unsafe.
Composer build tooling is present, but no security scanning tools were detected. This is a minor transparency and maintenance gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.