The package is tiny, MIT-licensed, and has no install-time scripts or meaningful runtime dependency burden. Its README and release notes help consumers, but future fixes are uncertain.
52%
Total Score
50
100
78
100
Only one release exists, published over seven years ago, with no releases in the last 12 months. This indicates a stagnant project, although a small constants package may need few changes.
The repository recorded zero commits and zero active maintainers during the last three months, providing no evidence of ongoing maintenance.
The repository has 1 star and no forks, so there is little community evidence to offset the lack of recent maintenance. Low popularity is supporting evidence rather than a verdict by itself.
The repository uses Composer build tooling, but no security scanning tools are reported. For this very small package, the missing scanning is a minor hygiene gap rather than a severe concern.
Version 0.1 is not a stable major release, which adds some maturity uncertainty, though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.