The package has a clear README, tests, and a small dependency surface. Its single-owner project has little public adoption and no security policy, leaving maintenance and response capacity less reassuring.
54%
Total Score
50
100
69
75
No declared license, license file, or detected repository license is present. This creates a concrete legal and adoption barrier for downstream projects.
The package is mature at over 12 years old with 14 releases, but it has had no release in the last 12 months; this points to slowing maintenance.
There were no commits and no active maintainers in the last 3 months. Combined with the absence of recent releases, this is a meaningful maintenance concern.
The repository has only 4 stars, 1 fork, and 1 watcher. Popularity is not decisive, but these figures provide little supporting evidence of broad community scrutiny.
The project uses Make and Composer, showing basic build structure, but it has no security-scanning tools, which leaves a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.