The README and small dependency surface make the library understandable to adopt. Its single maintainer, absent security tooling, and license mismatch add maintenance and transparency concerns.
43%
Total Score
50
100
72
75
The latest release was published in February 2019, with no releases in the last 12 months, indicating a long period without maintenance. This is the strongest abandonment concern.
A BSD-3-Clause manifest declaration and a license file are positive, but the artifact license was detected as MIT, creating an unresolved license mismatch that users should verify.
Only one registry maintainer is listed. That is not a verdict by itself, but it leaves limited visible publishing redundancy alongside the repository's long inactivity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad support community.
The repository uses Composer, giving the project basic build tooling, but it has no reported security-scanning tools. That weakens ongoing maintenance hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.