The package is small, uses Composer, and has no install-time scripts or workflow findings. It has a stable release and is not deprecated or archived, but provides no README for consumers.
38%
Total Score
0
56
75
The package has made no release in about 3 years and 10 months, with zero releases in the last 12 months. This is strong evidence of abandonment despite having three historical releases.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and reinforcing abandonment risk.
No declared license, license file, or repository license file was detected, leaving the legal terms for reuse unclear. This is a material transparency concern for a dependency.
The artifact has no README, tests, or changelog, although the exact release has GitHub release notes and the repository uses GitHub releases. The release notes partly compensate for missing change documentation, but the absent README makes integration less clear.
The repository name does not match the package name, and no README mention was available. That weakens confidence that the linked repository is specifically maintained for this package, although a subpackage or monorepo could explain a name mismatch.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.