Clear licensing, tests, documentation, and release notes make integration easier. The single-maintainer project has had no releases since 2018 and no repository commits since 2019, so future fixes are unlikely.
42%
Total Score
33
71
50
The package has made no release in about 7 years, despite five releases during its initial development. This is strong evidence that maintenance has stopped.
There were zero commits and zero active maintainers in the last 3 months, consistent with the repository having been inactive since 2019. This materially increases abandonment risk.
Only one registry maintainer is listed, leaving a thin publishing and maintenance base. The linked repository is also owned by an individual rather than an organization, so no broader backing is shown.
There has been no issue or pull request activity in the last month and no open work, offering no evidence of current support or ongoing maintenance.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.