Usable with caveats: it is a small, clearly packaged library with tests, documentation, a license, and a matching source repository. However, it has had only one release and no new release or repository activity since October 2022, so ongoing maintenance is uncertain.
58%
Total Score
75
100
78
88
The package has only one release, published in October 2022, with no releases in the last 12 months; this is a substantial maintenance and abandonment concern for a dependency.
There are no open issues or pull requests and no recent activity. The clean issue tracker is mildly positive, but it does not compensate for the absence of recent maintenance evidence.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low engagement levels provide little external confidence or community support.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.
The linked repository is not archived, but it was last pushed in October 2022; the unarchived status is reassuring while the long inactivity remains a maintenance concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.