The MIT declaration, detailed README, and repository tests make the package transparent to integrate. It has no security policy or security scanning, so maintenance ownership and response capacity are limited.
38%
Total Score
0
75
50
The latest release was about 8 years ago, and there were no releases in the last 12 months. Although 34 releases show earlier development, the prolonged release gap indicates abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and suggesting no current maintenance capacity.
The repository has 0 stars and 0 forks, with 1 watcher. Low popularity offers little supporting evidence of community review or shared maintenance, though popularity alone is not decisive.
Composer build tooling is present, but no security scanning tool was found. This is a modest transparency and maintenance gap, especially alongside the lack of recent activity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a modest concern but is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7 | — | — |
prewk/option Version 1.* | — | — |
prewk/result Version 1.* | — | — |
marcj/topsort Version ^1.1 | — | — |
illuminate/support Version 5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.