15%
Total Score
critical
Unfit to use: the package is deprecated and has had no release or commit activity since January 2017.
Packagist marks the entire package as abandoned and names onemustcode/collection as its replacement, making this release unsuitable for a new dependency.
The package has only three releases, all from January 2017, with no releases in the last 12 months; this indicates long-term abandonment rather than an actively maintained project.
The repository has recorded no commits and no active maintainers in the last three months, consistent with the package's years-long release gap.
The package includes a README, but it is only 66 characters and says the description, features, and tests are still TODO. Missing tests and changelog are normal for published artifacts, so the README quality is the material concern.
Composer is used as the build tool, but no security-scanning tool is present. This is a modest transparency and maintenance gap, especially alongside the inactive project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.