DOM Operation Queue
58%
Total Score
caution
Usable with caveats: no release or commit activity since November 2020.
One registry maintainer is consistent with the user-owned project backing, but it leaves little visible publishing redundancy. Combined with inactive commits, this increases continuity risk.
The package has only two releases, with none in the last 12 months and the latest published nearly six years ago. This indicates substantially reduced maintenance activity, though the package may be stable because it is small and mature.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which limits the severity but does not remove the maintenance concern.
The repository name matches the package, which supports ownership, but the README does not explicitly mention the package name. That weakens package-to-repository transparency slightly without suggesting a clear mismatch.
Composer is used as the build tool, providing project structure, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.