The package has a matching source repository, a substantial README, tests, and a documented MIT license. Its single maintainer and absent security policy provide limited resilience, while the project appears effectively abandoned.
44%
Total Score
33
100
75
83
The package has 14 releases, but none in the last 12 months and its latest release was about 5 years and 6 months ago. This strongly raises abandonment risk.
There were zero commits and zero active maintainers in the last 3 months. Combined with the old latest release, this is strong evidence that maintenance has stopped.
Only one registry maintainer is listed, and project backing identifies a user-owned repository rather than organizational backing. This leaves limited visible continuity if that maintainer stops work.
The repository is owned by an individual account, not an organization. That is consistent with a small package but offers less visible institutional backing for long-term maintenance.
Composer is used as a build tool, but no security scanning tools are reported. The missing scanning is a modest transparency gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.