Risky to adopt: the package has had no registry release for nearly 10 years and no repository commits in more than 6 years. It is not deprecated or archived, and the small, focused package has a stable MIT license, but maintenance appears effectively dormant.
48%
Total Score
0
100
64
88
The latest release was published nearly 10 years ago, with no releases in the last 12 months. Although the package has nine historical releases, the long release gap is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the nearly 10-year registry release gap. This strongly lowers confidence in ongoing maintenance.
The package contains a GitHub release note for this exact version, documenting the release despite the absence of tests, changelog, and README in the artifact. Missing tests and changelog are normal packaging gaps, but the missing README weakens consumer transparency.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a transparency gap, although it is less significant than the package's long-standing inactivity.
The linked repository is not archived, which is a positive counter-signal to the stale release and commit history. However, its last push was more than 6 years ago, so the unarchived status does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phmlabs/html Version ^2.1 | — | — |
psr/http-message Version 1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.