Documentation, licensing, and repository tests provide a solid foundation for maintenance and use. However, the last registry release was about four years ago and there were no commits or active maintainers in the last three months, so future support is uncertain.
60%
Total Score
50
100
89
83
The repository is owned by an individual account rather than an organization. That is consistent with a small open-source project, but it provides less organizational continuity to offset the limited recent activity.
The package has 26 releases since 2017, but none in the last 12 months and the latest release was about four years ago. The established history helps, but the long release gap raises abandonment and compatibility concerns.
There were zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this indicates weak recent maintenance capacity.
There is only one open issue and no new or closed issues or pull requests in the last month. The low volume is not severe by itself, but it provides little evidence of active support.
The repository uses Composer for its build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pragmarx/ia-arr Version ~5.0|~6.0|~7.0 | — | — |
pragmarx/ia-str Version ~5.0|~6.0|~7.0 | — | — |
pragmarx/ia-collection Version ~5.0|~6.0|~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.