The MIT license and matching repository make ownership and reuse straightforward. The small package has no tests or security scanning, leaving limited evidence that future issues will be caught or supported.
43%
Total Score
0
70
50
The package has had only 3 releases, all concentrated on 16 September 2019, with no releases in roughly 7 years. That long silence is strong evidence of abandonment risk for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the registry's lack of releases since 2019. The repository is not archived, but there is no observed recent maintenance.
Composer is used as a build tool, but no security scanning tooling is present. For a small package this is a modest transparency and maintenance concern rather than evidence that the release is unsafe.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a transparency concern, especially for a package with no recent maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.