The package is small and clearly licensed, with no install-time scripts or registry deprecation. Its maintenance record is thin, and the missing README, tests, security policy, and scanning reduce transparency for a library dependency.
56%
Total Score
50
100
71
75
Only one registry account has publish access. With individual project backing and no recent commits, the package has limited apparent maintenance capacity.
The package has no README, tests, changelog, or release notes. Missing tests and changelog are normal for published artifacts, but the absent README matters for a library consumers must integrate.
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it provides a thinner continuity signal than organizational backing.
All three releases were published within minutes on 2025-11-26, with no later release across roughly 10 months. That suggests an unfinished or inactive release process.
There were zero commits and zero active maintainers in the last three months. Combined with the tightly clustered release history, this is a meaningful maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fakerphp/faker Version ^1.24 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.