The package is clearly identified, MIT-licensed, documented, and has minimal runtime dependencies. Its tiny repository and lack of activity since December 2023 reduce confidence in ongoing maintenance for new requirements.
58%
Total Score
67
100
83
88
Only two releases were published, both on December 21, 2023, with no releases in the following 1008 days. That is a meaningful maintenance concern, though a small stable utility may need few updates.
There were no commits and no active maintainers in the last three months, consistent with the broader absence of activity since December 2023. This raises abandonment risk.
There are no open issues or pull requests and no recent activity. The clean tracker is mildly reassuring, but it does not compensate for the absence of commits.
The repository has zero stars and forks and one watcher, indicating very limited visible adoption. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tool is present. For this small package that is a hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.