The project has had no releases or commits for more than two years, and repository security scanning is absent. It is not deprecated or archived, and the package includes tests, a changelog, and a stable release.
62%
Total Score
50
81
100
The manifest declares AFL-3.0 and the artifact includes recognized LGPL-3.0 and GPL-3.0 license files from bundled components; the declaration does not cover all detected licenses, creating a licensing review concern.
The latest release was on February 15, 2024, with no releases in the last 12 months; this indicates a maintenance gap for a package that may need ongoing compatibility updates.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that current maintenance is inactive.
Composer build tooling is present, but no security-scanning tools were detected, leaving repository security hygiene less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.