Risky to adopt: this prerelease has had no new registry release for about 7 years and has no recorded popularity or security policy. It is licensed, documented, backed by a matching repository with tests, and not deprecated or archived, but maintenance appears effectively dormant.
42%
Total Score
69
50
The package has only one release, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance, despite the repository remaining available.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community adoption or external review. Low popularity is not conclusive by itself, but it reinforces the maintenance concerns.
The repository uses Composer for builds, which is appropriate for this package, but it has no security scanning tools. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. For a filesystem library, this weakens maintenance transparency.
The only release is still marked as a release candidate, so consumers do not have a stable version to depend on. The package’s age does not compensate for the unresolved prerelease status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/flysystem Version ^1.0 | — | — |
nunzion/php-expect Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.