Healthy and suitable to depend on for a small, stable interface. It has clear licensing, minimal dependencies, strong organizational backing, and a matching source repository; the main caveat is that it has had no commits or releases since 2022.
78%
Total Score
88
100
83
90
This is a mature package with one release published about 3 years and 10 months ago, but it has had no release in that period. That is a maintenance concern, although a stable interface may require few changes.
There were no commits and no active maintainers in the last 3 months. This is a real freshness concern, but the package's tiny stable scope and organizational backing partly explain why ongoing changes may be unnecessary.
The repository uses Composer build tooling, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe risk for this minimal package.
The linked repository is not archived, although it was last pushed about 3 years and 6 months ago, reinforcing the concern about inactive maintenance.
The repository has no security policy. This modestly reduces vulnerability-reporting transparency, though the package is a very small interface with no substantive runtime implementation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.