The MIT license, repository tests, and small dependency footprint make the package straightforward to inspect and integrate. Its source is not archived and the registry has no deprecation notice, but this version is an aging dependency with little evidence of ongoing care.
38%
Total Score
25
100
79
50
The latest release was published about 11 years ago, with no releases in the last 12 months. The short historical release cadence does not compensate for the prolonged gap since the last release.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the long release gap and indicating little recent maintenance capacity.
There were no new or closed issues or pull requests in the last month, while two issues remain open. This is consistent with an inactive project, though the small issue backlog limits the severity.
The repository uses Make and Composer, showing basic build tooling, but has no security scanning tools. The missing scanning is a secondary hygiene gap rather than the main adoption concern.
The repository has no security policy. This limits the documented vulnerability-reporting process, although it is less consequential than the demonstrated lack of recent maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.