It includes tests, a matching repository, release notes, and a clear GPL-3.0 license. The single maintainer, no security scanning, and unpinned workflow actions leave limited safety margin.
65%
Total Score
67
100
83
50
One registry maintainer is consistent with the repository being user-owned, but it leaves the project dependent on a single publisher.
The package has 13 releases since September 2021, but none in the last 12 months and the latest release was in September 2024, indicating a meaningful maintenance gap.
There were zero commits and zero active maintainers in the last three months, consistent with the broader absence of recent maintenance and increasing abandonment risk.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity or review.
Composer build tooling is present, but no security-scanning tools were detected, leaving security-quality checks less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mobiledetect/mobiledetectlib Version >=2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.