32%
Total Score
unhealthy
Risky: a single 2017 release and no license leave maintenance and legal uncertainty.
This package has only one release, published in March 2017, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last three months, with its last push in March 2017. This confirms that the release-history gap reflects inactive development rather than merely slow publishing.
No declared license, license file, or detected license is present in the package or repository. That creates a material legal and adoption concern for downstream users.
The artifact has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and changelog are understandable for a tiny package, but the absent README leaves consumers without usage guidance.
The repository uses Composer, which provides basic build/package support, but it has no security-scanning tools. For an inactive package, the lack of automated security coverage adds a modest transparency concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.