Risky to adopt: this package has had no new release or repository activity for about nine years. It has tests, a license, and a small dependency footprint, but the project appears effectively abandoned and has no security policy.
35%
Total Score
100
64
75
The package has only one release, published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.
The repository has zero stars, forks, and watchers. Popularity is not decisive by itself, but it provides no supporting evidence of active community use or review.
Composer and Phing build tooling are present, showing basic project structure, although no security scanning tools were found. This modestly supports maintainability but does not offset the stale activity.
The repository is not marked archived, but it was last pushed about nine years ago. The unarchived status does not compensate for the prolonged lack of activity.
No repository security policy was found. This is a transparency gap, and there is no provided evidence of compensating security-maintenance practices.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.