The package has a clear README, a small dependency surface, and no install-time scripts. Its tiny audience and lack of security tooling reduce confidence for a library whose last source change was years ago.
56%
Total Score
50
100
78
75
The package has had only 3 releases, all by 27 March 2023, with no release in roughly 3 years and 6 months. This materially lowers confidence in ongoing maintenance.
There were no commits and no active maintainers in the last 3 months, consistent with a project that is no longer actively maintained.
The repository has 0 stars and 0 forks with 1 watcher, so there is little community adoption to provide supporting confidence or alternative maintenance capacity.
Composer is used for builds, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
The repository is not archived, but its last push was on 31 December 2021, roughly 4 years and 9 months before collection; the non-archived status does not compensate for that inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.