The package is small and its README includes installation guidance, a changelog entry, and release notes. Its stable packaging and lack of install scripts help, but the limited project activity leaves maintenance uncertain.
60%
Total Score
50
78
83
A license is declared in the manifest, so this is not an unlicensed release. However, the package README describes the code as GPL while the manifest declares it proprietary, creating a licensing clarity concern.
This is the only release, published about 4 years ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that has seen no observed development since its initial release.
The repository has 0 stars and 0 forks, with 2 watchers. Low adoption is supporting evidence of limited maturity, but it is not decisive for a small, narrowly scoped module.
Composer is used as the build tool, which is appropriate for this package. No security scanning tools are present, a minor hygiene gap for a dependency project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.