The published artifact contains only composer.json and one interface, with no README to guide consumers. Stable versioning and no install scripts help, but long-term maintenance and provenance remain difficult to verify.
34%
Total Score
60
75
The package has had no release in over six years; all four releases arrived within about three hours in May 2020, providing strong evidence of abandonment risk.
No declared license, detected license, or license file is present, leaving developers without clear permission to use or redistribute the code.
The artifact contains only composer.json and one interface file, offering little implementation or documentation context for evaluating maturity and consumer support.
The published library has no README, which limits integration guidance. Missing tests and changelog files are normal for a package artifact and do not add concern here.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.