The package is small and easy to inspect, with a clear README, repository tests, and minimal dependencies. Its release and commit history stopped years ago, making fixes and compatibility updates unlikely.
40%
Total Score
0
63
75
The package has only two releases, both in October 2017, with no release in roughly 8 years and 11 months. This strongly indicates abandonment despite the initially rapid release interval.
There were zero commits and zero active maintainers in the last three months, consistent with the package having received no meaningful maintenance for years.
The repository has only 2 stars and no forks, providing little evidence of an active user or contributor community. Popularity is supporting evidence, but this reinforces the abandonment concern.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than a standalone reason to reject this small package.
The repository is not marked archived, which is a positive ownership signal, but its last push was in February 2018 and does not offset the broader inactivity evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.