Its MIT license, README, changelog, and minimal PHP dependency make the package easy to inspect and integrate. The small repository has no security policy or scanning, leaving little evidence of ongoing oversight.
38%
Total Score
33
100
72
83
The package has had only three releases, all clustered in July 2017, with no release in about 9 years. That is strong evidence of abandonment for a dependency whose data may need updates.
There were no commits and no active maintainers in the last 3 months, reinforcing the evidence that maintenance has stopped for about 9 years.
Only one registry account has publish access. That can be normal for a small package, but combined with the lack of recent releases it provides little maintainer redundancy.
The repository is owned by a user account rather than an organization, offering no evidence of broader institutional backing. This matters mainly because the package also has a single registry maintainer and no recent activity.
The repository has 2 stars, 0 forks, and 3 watchers. Low adoption is supporting evidence of limited community review, though popularity alone is not decisive.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.