The repository contains only four files and has recorded no commits in the last three months. A short README and simple dependency profile help, but there are no tests, changelog, security policy, or security scanning tools.
35%
Total Score
50
100
75
67
The artifact overlap is 1.0 with prestashop/autoload, which has about 181,860 monthly downloads versus 73 for this package. Although the README does not identify it as that package, the complete overlap strongly suggests consumers may have wanted the established lookalike.
The package and repository each contain only four files, including the implementation, README, and Composer manifest. This is consistent with a very small utility, but leaves little project structure or supporting material to assess.
The package is 448 days old but has had no releases in the last 12 months, and all four releases share the same release date. That leaves little evidence of ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last three months. For a small package this may be acceptable after stabilization, but it provides weak evidence of current maintenance capacity.
Composer is used as the build tool, but no security scanning tools are configured. The build setup is appropriate, while the missing scanning provides a minor hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.