It has a clear MIT license, focused dependencies, tests, and a matching source repository. Maintenance has effectively stopped since June 2022, with no recent commits or releases; the tiny user base and absent security scanning add uncertainty.
55%
Total Score
25
100
72
75
Only two releases were published, and none appeared in the last 12 months; the latest release is from February 2022, indicating a long period without updates.
The repository recorded no commits and no active maintainers in the last three months, consistent with the release history showing prolonged inactivity.
The package is backed by an individual account rather than an organization, so its single-maintainer structure offers limited visible continuity.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little evidence of a broad user or contributor base to sustain maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.