The small codebase has clear usage documentation, a stable release, and no install scripts or dependency burden. Its single-maintainer project has seen no commits in the last three months, so future fixes are uncertain.
58%
Total Score
50
100
83
83
The repository is owned by an individual rather than an organization, so the one registry maintainer represents a genuinely thin project backing rather than ordinary organization publishing hygiene.
The package has had no registry release since January 2022 and none in the last 12 months, which raises maintenance and abandonment concerns despite eight releases overall.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the long gap since the latest package release.
The repository has no stars or forks and one watcher, offering little independent evidence of a broad user or contributor community. Popularity is supporting evidence only, so this modestly limits confidence rather than deciding the score.
The repository uses Composer, which fits the package ecosystem, but it has no detected security scanning tool; this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.