The repository includes tests, a matching README, an MIT license, and organization backing for this focused polyfill. Its small scope reduces maintenance needs, but the absence of recent activity and unpinned workflow actions leave meaningful upkeep concerns.
63%
Total Score
67
88
50
The package has had no release in about 2 years and 8 months, with three releases total and none in the last 12 months. Its narrow polyfill scope partly reduces the need for frequent releases, but the long gap still raises maintenance concern.
There were no commits and no active maintainers in the last three months. This reinforces the stale release history, though the package's focused compatibility role may require little ongoing code change.
There is one open issue and one open pull request, with no new or closed items in the last month. The small workload is not severe, but the lack of recent handling adds a modest maintenance concern.
Composer is used for builds, but no security-scanning tooling is present. That is a hygiene gap rather than evidence that the package is unsafe to depend on.
The single workflow was fully analyzed without high- or medium-confidence findings or unsafe triggers, but both action references are unpinned. This weakens build reproducibility and supply-chain hygiene without indicating a severe workflow risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.