The focused artifact is clearly licensed, includes a changelog, and has no install-time scripts. Its repository could not be found, and no releases have appeared since January 2019, so maintenance and provenance cannot be verified.
42%
Total Score
100
60
100
The package has only three releases, with none in the last seven years; this strongly raises abandonment risk despite a short early release interval.
A changelog is present, but the published artifact has no README; that is a modest consumer-documentation gap for a reusable PHP package.
Version 0.1.2 indicates an immature pre-1.0 API, adding compatibility risk for consumers, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
reef/reef Version ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.