The single registry maintainer and 0.x version provide little evidence of ongoing support. The repository could not be found, so maintenance and provenance are difficult to verify; its minimal dependency surface does not offset these risks.
12%
Total Score
50
100
17
Packagist marks the entire package as abandoned, with no replacement package specified. This is a severe warning against adopting the release.
The latest release was published in February 2021, over five years ago, with no releases in the past 12 months. This strongly indicates abandonment.
One account has publish access, which suggests limited maintenance capacity; combined with the absence of recent releases, there is little evidence of active support.
Version 0.7.13 is not a stable-major release, although it is not a prerelease. The 0.x status adds compatibility risk to an already stale package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.