The package has a clear license, documentation, tests, and a small dependency surface. Its workflow is fully analyzed without dangerous triggers or audit findings, but it lacks a security policy and uses three unpinned actions.
62%
Total Score
50
100
88
83
The source repository is owned by an individual account rather than an organization, so the single registry maintainer offers limited visible backing for long-term continuity.
The package has 11 releases since May 2013, but none in the last 12 months and the latest release was in February 2024, indicating substantially slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently inactive development.
There are no open issues and one open pull request, but no issues or pull requests were closed in the last month, providing little evidence of active maintenance.
Composer is used for builds, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.