Usable with caveats: the package is licensed, backed by a matching organization repository, and not deprecated or archived. However, there has been no release in over a year and no recorded commit activity in the last three months, so maintenance appears limited.
62%
Total Score
83
100
72
75
The published artifact has no README, which is a documentation gap for a library, but the source repository contains a README, tests, and extensive documentation that partly compensates.
The package has a long history and 24 releases, but it has had no releases in the last 12 months; the latest release was over a year ago, which lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, and the last push was over a year ago; this is the main abandonment concern.
The repository has one star and no forks or watchers, indicating very limited visible adoption. Popularity is only supporting evidence, so this lowers confidence rather than making the package unfit.
Composer is used for builds, but no security scanning tool is present, leaving a transparency and maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aura/html Version ~2.4 | — | — |
igorw/get-in Version ~1.0 | — | — |
pimple/pimple Version ~3.0 | — | — |
evenement/evenement Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.