The MIT license, clear README, matching repository, and clean package layout make the project transparent to integrate. Its very small community and lack of security tooling leave little evidence of ongoing support.
38%
Total Score
50
71
50
The last release was in November 2016, with no releases in nearly ten years; the three-release history provides little evidence of continuing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and a substantial abandonment risk.
Two stars, no forks, and one watcher show a very small user and contributor footprint, so there is little external activity to compensate for the inactive maintainer history.
Composer build tooling is present, but no security scanning tools were observed, leaving weaker automated oversight for a package with an otherwise inactive project.
The repository has no security policy, reducing transparency for vulnerability reporting and response; this adds concern alongside the inactive project history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.