The license, README, and package identity are clear, but the project has no security policy or scanning. Its small dependency profile does not offset the lack of recent maintenance, leaving future compatibility and fixes uncertain.
35%
Total Score
25
100
72
83
The package has had no releases in the last 12 months, and its latest release was in April 2021 despite 83 total releases. This is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last 3 months. Combined with the old last push and release history, this indicates a serious lack of ongoing maintenance.
There was no new or closed issue or pull-request activity in the last month, and no pull requests were merged. This supports the conclusion that the project is inactive, although issue counts are partly unknown.
The linked repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no visible community buffer for an inactive project.
Composer is used for builds, which is appropriate, but no security-scanning tools are configured. This is a hygiene gap that adds to the maintenance concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ratchet/pawl Version ^0.3.0 | — | — |
react/socket Version ^1.0 || ^0.8 || ^0.7 | — | — |
ratchet/rfc6455 Version ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.