The repository matches the package and contains the expected source files, while Composer is used for builds. Its lack of tests, security scanning, and security policy leaves little evidence of ongoing quality assurance.
34%
Total Score
0
38
50
This is the only release, published nearly five years ago, with no releases in the last 12 months. That strongly suggests the package may be abandoned, although a small feature package can sometimes be complete after one release.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its sole release. No provided maintenance signal compensates for this inactivity.
There is no declared license, license file in the package, or license file in the repository. This creates a real adoption and redistribution concern rather than a cosmetic metadata gap.
The package includes a README, but it is only 12 characters long and provides no meaningful consumer guidance; the absence of tests and a changelog is normal for a published artifact and is not counted against it.
Composer is used as a build tool, which supports reproducible package structure, but no security scanning tool is configured. That weakens assurance for a package with otherwise limited quality evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.