The repository has had no commits since January 2023, and it has no security policy or automated security scanning. Clear licensing, thorough documentation, a matching repository, and release notes reduce transparency concerns.
62%
Total Score
50
100
81
83
There were zero commits and zero active maintainers in the last three months, consistent with the last push in January 2023 and indicating current abandonment risk.
The package has made no release in more than three years, with zero releases in the last 12 months; this is a meaningful maintenance concern despite its established release history of 22 versions.
The repository has only 2 stars, 1 fork, and 1 watcher. Low adoption is supporting evidence of a small project, not a health verdict by itself.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful security-maintenance gap.
The repository has no security policy, which makes vulnerability reporting and coordinated maintenance less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.26.3 || ^2.0 | — | — |
repat/date-constants Version * | — | — |
repat/http-constants Version * | — | — |
stevegrunwell/time-constants Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.