The package includes tests, a changelog, release notes, and a focused dependency set. Repository activity is currently quiet, and its two workflow actions are unpinned; the missing security policy is a smaller transparency gap.
68%
Total Score
63
100
89
75
One registry maintainer is consistent with the individually owned project shown by the backing signal, though it indicates a limited publishing bus factor.
The package has five releases since June 2016 but none in the last four years, indicating a slow or stopped release cadence. The repository was pushed recently, which partly offsets the age of the latest registry release.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance capacity.
There are no open issues and one open pull request, but no issues or pull requests were closed in the last month; this offers little evidence of active support.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webimpress/safe-writer Version ^2.2 | — | — |
laminas/laminas-servicemanager Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.