The package has a clear GPL declaration, a usable README, and repository tests and changelog coverage. Its beta status and complete absence of releases or commits since 2015 leave maintenance and future compatibility highly uncertain.
35%
Total Score
0
75
75
The package has only 4 releases, all activity ended in December 2015, and it has had no releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The linked repository is therefore not showing ongoing maintenance.
The repository uses Composer, but no security scanning tool was detected. This is a modest transparency gap, though it is secondary to the much older maintenance evidence.
The repository has no security policy. That reduces transparency around vulnerability reporting, but it is less significant than the package's lack of recent development.
The assessed version is still a prerelease beta, and all recent releases are prereleases. Combined with the long period without releases, this leaves compatibility and support uncertain.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.