Its tiny six-file tree and minimal PHP/JSON dependency set keep integration straightforward. The MIT declaration is clear, but the package has no README or security policy and has seen no release in about four years.
45%
Total Score
100
69
75
Only two releases exist, both from October 2022, with none in about four years. That long silence is strong evidence of abandonment risk, despite the package not being deprecated.
The package has no README, which makes a library harder to evaluate and integrate; absent tests and changelog are normal for a published artifact and do not add concern here.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of community adoption or review.
Composer is used for the build, but no security-scanning tooling is present. The missing scan is a hygiene gap rather than proof of unsafe code.
The linked repository has no security policy. This is a transparency gap for a dependency, although the package's small scope limits the practical impact.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.