It is licensed, documented, and backed by a matching repository with source tests and a changelog. However, development stopped after two releases in November 2024, and workflow dependencies are not pinned.
55%
Total Score
25
100
78
75
There were zero commits and zero active maintainers during the last three months, indicating that current maintenance has stopped rather than merely slowed.
The package and repository are owned by the same individual account, so the source ownership is consistent, but there is no organization backing shown to compensate for the very small maintenance base.
Only two releases were published, both on November 1, 2024, with no releases in the following 12 months. This indicates a very limited release history and possible abandonment risk.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the inactive repository.
Composer is used for builds, but no security-scanning tooling is configured. This is a modest transparency and maintenance gap, not evidence of a defect by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.