A single maintainer and no recent commits leave limited evidence of ongoing support. The package is clearly licensed, documented, not deprecated, and has a matching source repository.
55%
Total Score
50
81
83
One registry maintainer provides a thin support base, with no organization backing shown to compensate for that concentration.
The package made three releases within roughly two days, then had no newer release over the following eight months; this suggests an unfinished or inactive project rather than an established cadence.
The repository recorded zero commits and zero active maintainers during the last three months, which is meaningful evidence of stalled maintenance for a package still below version 1.0.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the limited maintenance activity.
Composer build tooling is present, but no security-scanning tool is configured; this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.