The dependency surface is tiny, installation has no lifecycle scripts, and the repository is not archived. The six-character README and package-name mismatch make adoption and ownership harder to verify.
38%
Total Score
0
100
50
100
The package has had no release in about 8 years: all four releases occurred within roughly 40 minutes in September 2018, with none in the last 12 months. This strongly indicates abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push being about 8 years ago. The inactivity materially lowers confidence in ongoing maintenance.
The manifest declares MIT, but the artifact license file and repository license are detected as GPL-3.0. The release is licensed, but the mismatch creates a real compliance and adoption concern.
A README is present, but it contains only 6 characters and provides no useful integration guidance. The missing tests and changelog are expected for a published Composer artifact and are not concerns by themselves.
The linked repository name does not match the package name and its README does not mention the package. That makes package ownership harder to verify and raises concern that the repository may not specifically belong to this release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.