The package has a stable version and a compact source tree, but its tiny README offers little integration guidance. Organization backing and no install scripts help, yet the release is difficult to trust for a new dependency.
38%
Total Score
100
100
56
100
Only three releases were published, all around June 2018, with no release in more than eight years. This strongly raises abandonment risk despite the package reaching a stable major version.
Neither the package nor the linked repository contains a declared license or license file. That creates a material adoption and reuse concern for a dependency.
The package includes a README, but it is only 17 characters long and provides no meaningful usage guidance. Missing tests and changelog files are normal for a published artifact and are not concerns here.
The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, the mismatch leaves ownership of the published package less clear.
The repository has zero stars, one fork, and one watcher, providing little supporting evidence of community use or review. Low popularity alone is not decisive, but it reinforces the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7 | — | — |
nesbot/carbon Version ^1.29 | — | — |
tightenco/collect Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.