Documentation, tests, licensing, and release notes make the package straightforward to evaluate. Its small user base, absent security policy, and inactive recent development leave more maintenance risk than a mature dependency.
62%
Total Score
50
100
78
67
The registry namespace and repository are owned by the same individual, so ownership is consistent. Individual ownership limits organizational redundancy but does not itself indicate poor health.
The package has only 3 releases since September 2021, with no releases in the last 12 months and the latest release roughly 2 years ago. This indicates slow maintenance, though the project is not abandoned outright.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the roughly 2-year gap since the last push. This raises current maintenance and abandonment risk.
The repository has 0 stars and 0 forks, with 2 watchers. Low adoption is supporting evidence of a small project and limited external validation, not a health verdict by itself.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest repository hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alchemy/zippy Version ^0.4 || ^1.0 | — | — |
nguyenanhung/filesystem-helper Version >=2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.