The package is small and easy to inspect, and its repository clearly matches the package. It has no license and has seen no release or commit activity since 2013, making adoption a liability.
15%
Total Score
0
25
50
The package declares no license, contains no license file, and the repository has no license file. Developers therefore lack clear permission to depend on or redistribute it.
This is the package's only release, published in May 2013, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no current maintenance.
Composer is used for the project, but no security scanning tools are configured. This is a secondary hygiene gap alongside the much more serious maintenance and licensing concerns.
The repository is not marked archived, which avoids one severe risk, but its last push was in April 2013 and does not offset the lack of current activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.