The repository contains tests and uses a conventional Composer build, while its runtime dependency set is modest. The package is small and its publishing and security documentation are thin.
40%
Total Score
0
100
50
83
Only two releases were published, both in March 2023, and none appeared in the following 3 years 6 months. That leaves the package with a strong abandonment concern.
There were no commits and no active maintainers in the last 3 months, consistent with no meaningful repository activity since March 2023. This materially increases maintenance and abandonment risk.
Neither the package nor the linked repository declares or contains a recognized license. Developers lack clear permission to use and redistribute this dependency.
The published artifact has no README, but the repository does contain tests. The missing consumer documentation is a minor transparency and integration gap rather than evidence of abandonment by itself.
The repository has 0 stars and 0 forks, with one watcher. Low adoption is supporting evidence of a small project and offers little external validation, but it is not decisive alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
react/promise Version ^2.5 | — | — |
react/event-loop Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.