Risky to adopt because the last release and repository activity were nearly four years ago, with no recent commits or active maintainers. The package is not deprecated or archived and has a clear license, but its small, inactive project provides little maintenance assurance.
38%
Total Score
33
50
78
90
The package has 26 releases since 2017, but none in the last 12 months and the latest release was nearly four years ago, indicating prolonged inactivity.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and creating a strong abandonment concern.
The package has five runtime requirements, including PHP extensions and two libraries; this is a moderate dependency surface rather than a severe concern, but it adds compatibility obligations for a small inactive package.
Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, and the lack of recent activity provides no compensating evidence of broader maintenance capacity.
The source repository is owned by an individual account, not an organization. This does not establish poor quality by itself, but it offers less visible backing for a project already showing no recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
cri2net/php-singleton Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.