Usable with caveats: the package is clearly licensed, lightweight, documented, and not deprecated, but it has had only one release and no commits or maintainer activity for six months. Adopt it only if its small, stable API fits and you can tolerate limited evidence of ongoing maintenance.
62%
Total Score
67
100
78
83
There were zero commits and zero active maintainers in the last three months, which is the strongest concern because it provides no evidence of ongoing maintenance after the initial release.
This is a new package with one release over its six-month history, so there is not enough release history to demonstrate sustained maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, though low popularity alone is not a decisive problem for a small package.
Composer is used for the project, but no security scanning tools are configured. The missing scanning is a modest transparency gap, not evidence that the package is unsafe.
The source repository is not archived, but its last push was six months ago; the active status does not compensate for the lack of recent activity shown elsewhere.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.