The published artifact is extremely thin and lacks a README, making integration and provenance harder to assess. The declared licenses and lack of install scripts are positive, but the package has little evidence of ongoing maintenance.
32%
Total Score
100
70
50
The artifact contains only .gitignore and composer.json, leaving no implementation files or documentation visible in the published tree. This makes the release unusually difficult to inspect and assess.
This package has only one release, published about five years and nine months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, with no newer release activity to compensate.
The published package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a real consumer-documentation gap for a PHP package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.