Its stable version and single runtime dependency keep adoption simple. The package has no README, tests, or changelog, and the linked repository has no security scanning; verify compatibility before taking it on.
34%
Total Score
0
100
69
83
This package has only one release, published 3 years and 7 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, with no later release activity to compensate for it.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release gap. No recent maintenance activity compensates for this.
The published library has no README, which makes integration and intended usage harder to verify. The absent tests and changelog are normal for a published artifact and do not add a separate concern.
The linked repository is named "framwork" rather than matching the package, and its README does not provide a confirmed package mention. That weakens confidence that the repository is the package's authoritative project source.
The repository uses Composer build tooling, which supports reproducible package handling, but it has no security-scanning tools. The tooling is a modest positive that does not offset the stale project state.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.