The MIT license, substantial README, exact release notes, repository tests, and matching source repository support adoption. Unpinned workflow actions and no security policy leave avoidable maintenance and supply-chain hygiene gaps.
66%
Total Score
63
100
89
75
Only one registry account has publish access, creating a narrow publishing base. The matching repository owner provides some continuity but does not remove the single-person dependency.
The package has 12 releases since July 2020, but none in the last 12 months, which is a meaningful sign that maintenance has slowed.
The repository recorded zero commits and zero active maintainers in the last three months, a direct indication of currently inactive development.
There are four open issues but no new or closed issues or pull requests in the last month, consistent with a quiet project and mildly weakening evidence of active support.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mlocati/idna Version ^1 | — | — |
mlocati/ip-lib Version ^1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.