63%
Total Score
caution
Usable with caveats: no release or commit activity for about 19 months, despite a matching, unarchived repository.
The package has six releases over about four years, but none in the last 12 months and the latest release was about 19 months ago. This indicates slowed maintenance, though the release history is not abandoned outright.
The repository recorded zero commits and zero active maintainers in the three months measured, consistent with the latest push being about 19 months ago. This materially raises maintenance and abandonment risk.
The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not evidence that the package is unsafe to depend on.
No GitHub Actions workflows were present, so there are no workflow trigger, permission, pinning, or audit findings to weigh. This also means automated repository checks are not evidenced.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.