This release is not archived and has a long release history, stable versioning, repository tests, a declared MIT license, lightweight runtime dependencies, and no install-time lifecycle scripts. However, the package is explicitly marked abandoned on Packagist with a replacement package, and current repository activity is very thin: only 1 commit from 1 contributor in the last 3 months, with all recent commit activity concentrated in one person. Missing repository security policy and workflow-level token permissions add transparency and CI-hardening concerns. Developers should prefer the stated replacement package unless they specifically need this package and have verified its compatibility.
40%
Total Score
75
100
81
75
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.