Its small dependency surface, tests, clear license, and matching organization-backed repository reduce adoption friction. The package remains operationally documented, but maintenance capacity is the main concern.
35%
Total Score
50
100
71
83
The package has only 2 releases, and its latest release was nearly 10 years ago; there have been no releases in the last 12 months. This is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and offering no evidence of current maintenance.
There are 3 open issues, with no new or closed issues and no pull-request activity in the last month. This suggests unresolved maintenance needs.
The repository has only 2 stars, 0 forks, and 3 watchers. Popularity is supporting evidence rather than a verdict, but these very small figures provide little evidence of a sustained user or contributor community.
Composer is used for builds, which fits the package ecosystem, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.