The package includes a clear README, repository tests, release notes, and a matching MIT license. Its small user-owned project has no security policy, limiting transparency around vulnerability handling.
65%
Total Score
50
83
50
The package has 17 releases over more than 10 years, but 0 releases in the last 12 months; the latest release was in October 2024, nearly two years before collection.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently inactive maintenance despite the recent stable release history.
There were 0 new or closed issues and 0 merged pull requests in the last month, with 4 issues and 1 pull request still open; this supports the maintenance concern but is not severe alone.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The licensed, tested project provides some transparency but does not replace that guidance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ruafozy/mersenne-twister Version ^2.0 | — | — |
symfony/expression-language Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.