The package has a clear README, tests, a matching source repository, and minimal dependencies. Its missing license and roughly 19 months without a release or commit make long-term reliance uncertain.
56%
Total Score
50
100
75
88
There were zero commits and zero active maintainers in the last three months, consistent with roughly 19 months since the last push and raising abandonment risk.
No declared license, license file, or repository license file was detected. That creates a real legal and adoption concern for a dependency.
The package made three releases within about one day, then had no release in roughly 19 months. This short burst followed by a long gap lowers confidence in ongoing maintenance.
There were no new or closed issues or pull requests in the last month. With no recent commits, this supports the conclusion that the project is currently inactive.
Composer build tooling is present, but no security scanning tools were detected. For this small package that is a hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.