It has one maintainer, minimal adoption, and no security policy, while the package does include tests, documentation, and a clear license. The repository is not archived and the package is tied to its matching organization repository.
40%
Total Score
50
100
72
75
The package has had no release in about 5 years and 8 months, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite the eight historical releases.
There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this is strong evidence that maintenance has stopped.
The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low figures provide little evidence of broad review or community support.
The repository uses Composer, showing a defined build tool, but it reports no security-scanning tools. The missing scanning is a modest transparency and maintenance gap.
The linked repository is not archived, which preserves the possibility of future maintenance. However, its last push was about 5 years and 3 months ago, so this does not resolve the activity concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.