This package can be used to get random value from an array with given probability for each value
52%
Total Score
caution
No releases or commits since 2017, despite a clear README, stable version, and permissive license.
Only two releases were published, both in August 2017, with no release in roughly 9 years. This is strong evidence of abandonment risk, although the package may be functionally complete.
There were no commits and no active maintainers in the last 3 months, consistent with the release history showing no updates for roughly 9 years. This materially raises abandonment risk.
The repository has 1 star and no forks, indicating very limited adoption and community visibility. Popularity is supporting evidence rather than a verdict, but it provides no compensating maturity signal here.
Composer build tooling is present, but no security scanning tools are configured. This is a hygiene gap that matters more alongside the repository's prolonged inactivity.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified. This is a transparency gap, though it is less severe than the maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.