Risky to adopt: this package has had only one release, with no new release or repository commits for about six years. It has a clear MIT license, tests in the repository, and matching project backing, but the lack of observed maintenance makes abandonment a substantial concern.
45%
Total Score
50
71
100
Only one release exists, published about six years ago, with no releases in the last 12 months; this is strong evidence of an inactive package.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the roughly six-year release gap and indicating little current maintenance capacity.
The repository is not marked archived, which is a positive compensating signal, but its last push was about six years ago and does not offset the observed inactivity.
Version 0.1.0 is a non-prerelease release, so it is not explicitly unstable, although its early version and lack of subsequent releases limit evidence of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hhvm/hsl Version ^4.0 | — | — |
hhvm/hhvm-autoload Version ^3.0 | — | — |
hhvm/hsl-experimental Version ^4.50 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.