The package includes a clear README, MIT licensing, release notes, and no install-time scripts. Its small user base, absent security policy, and unpinned workflow action add limited maintenance and hygiene concerns.
45%
Total Score
0
75
67
The latest release was in March 2020, with no releases in the last 12 months; this is a substantial abandonment concern despite eight releases and a previously regular cadence.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the long release gap and indicating no current maintenance activity.
Seven stars and four forks show a small user base, which is supporting evidence of limited adoption but not a health verdict by itself.
The repository has no security policy, leaving vulnerability reporting and maintenance expectations undocumented; this matters more when general maintenance is already inactive.
The sole workflow was fully analyzed with no dangerous triggers or audit findings, but its one action is unpinned, leaving a minor reproducibility and workflow-supply-chain weakness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1 | — | — |
gregwar/cache Version ^1 | — | — |
myclabs/php-enum Version ^1 | — | — |
psr/simple-cache Version ^1 | — | — |
mrcnpdlk/lib-mapper Version ^0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.