The package is small and clearly identified, with straightforward contents and stable metadata. Its maintenance and release history are effectively dormant, while documentation, testing, and security tooling are minimal. Pin this version only if its narrow functionality is sufficient and you can maintain it locally.
42%
Total Score
25
75
83
Only one release exists, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of a dormant package and raises abandonment risk.
There were no commits and no active maintainers in the last 3 months. Combined with the single historical release, this indicates sustained inactivity rather than a short pause.
A README is present and the release has a GitHub release, but the README is only 22 characters and the package and repository contain no tests or changelog. The GitHub release partly documents the release process, but consumer guidance remains minimal.
The repository is owned by an individual account rather than an organization, providing no organizational backing to compensate for the package's thin maintenance record.
The repository uses no build tooling and has no security scanning. For a small PHP extension this is not inherently disqualifying, but it leaves little evidence of modern project safeguards.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.