The last release and repository update were over six years ago, with one publisher and no security scanning. The package remains licensed, documented, stable, and not archived, but its maintenance capacity is unclear.
42%
Total Score
50
100
72
83
The latest release was over six years ago, and there were no releases in the last 12 months. Five releases over the package's lifetime show some history, but the long inactivity materially raises abandonment risk.
Only one account has registry publish access. That may represent the whole project or simply its publishing setup, but no organizational backing is shown to compensate for the thin publisher base.
The repository has 2 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these very low levels provide little evidence of an active user or contributor community.
Composer is used for builds, but no security-scanning tools are present. This weakens ongoing maintenance hygiene, especially alongside the long period without updates.
The repository is not archived, which is a positive sign, but it was last pushed over six years ago and therefore does not offset the stale release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.