simple json response that confirmes that package has been used
38%
Total Score
unhealthy
Risky: one release in over six years, with an inactive repository and limited consumer documentation.
Only one release exists, published over six years ago, with no releases in the last 12 months. This strongly suggests abandonment for a package intended to be depended on.
A single registry maintainer provides little visible publishing redundancy. This is a meaningful resilience concern, although it is not evidence of abandonment by itself.
The artifact has no README, so consumers receive little integration guidance; the absence of tests and a changelog is normal for a published artifact and is not penalized.
The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintainer base.
Composer is used as the build tool, but no security-scanning tooling is present. That is a modest hygiene gap rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.