A clear README, MIT license, and exact-version release notes make integration easier. Repository tests and organizational ownership add useful support, while the small dependency set keeps the package straightforward.
58%
Total Score
75
100
79
75
The last registry release was nearly five years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the package has six releases and appears intentionally narrow in scope.
There were no commits and no active maintainers in the last three months. Combined with the old registry release, this indicates a real abandonment risk, though the repository was pushed in March 2024.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tooling is configured, a modest transparency and maintenance gap.
The repository has no security policy. This is a minor transparency gap for a small compatibility library, not a severe dependency-health issue by itself.
The assessed release is stable and not a prerelease, which supports predictable use. However, the reported latest version is v1.0.3 while this release is v2.0.1, making the registry metadata somewhat inconsistent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hhvm/hsl Version >=4.7 <5 | — | — |
hhvm/hhvm-autoload Version ^1|^2|^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.