Its single runtime dependency keeps installation simple, and the repository is not archived. Documentation and security-process coverage are thin, leaving little evidence of ongoing care.
40%
Total Score
25
100
69
75
The latest release was published in February 2020, with no releases in the following six years; this is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and lack of current maintenance.
Only one individual has registry publish access. That is workable for a small package but leaves limited visible maintainer redundancy.
The package has no README, while its lack of tests and changelog is normal for a published artifact. Missing consumer documentation is still a modest transparency gap for a library.
Composer is used for the build, which is appropriate, but no security-scanning tooling is present; this is a modest process gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.