The package is documented, tested, licensed, and has only one runtime requirement. Its releases were clustered into three days and the repository shows no commits in the last three months, so maintenance continuity is the main concern.
55%
Total Score
50
100
83
83
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not indicate organizational backing or redundancy.
Six releases were published within the last 12 months, but all appear concentrated during the initial three-day release window rather than showing sustained cadence.
There were zero commits and zero active maintainers in the last three months, leaving no recent evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers, offering no community adoption evidence. This is supporting context rather than a verdict on a small package.
Composer is used for the build, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.