Risky to adopt: this package has had only one release and no repository activity since June 2020. It is clearly licensed and correctly backed by its matching repository, but its long-term abandonment risk is high.
42%
Total Score
50
61
75
The package has only one release, published about 6 years ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance or compatibility work.
There were no commits and no active maintainers in the last 3 months, consistent with a project that has effectively stopped changing.
The artifact has a README and a GitHub release note, but the README is only 8 characters long and the repository has no tests or changelog. The release note is a small positive, while the extremely limited documentation reduces transparency for consumers.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but this provides no supporting evidence of community adoption or oversight.
The repository uses Composer, showing basic project tooling, but it has no security scanning. Given the package's otherwise minimal and inactive project state, this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.