The package is licensed, stable, and has a recent release history with release notes. Its source repository shows no commits in the last three months, and it has no security policy or scanning, which weakens maintenance transparency.
56%
Total Score
50
50
89
67
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite the registry's frequent releases.
The package declares 14 runtime dependencies, including several substantial libraries, which increases update and transitive-maintenance exposure compared with a small dependency set.
The package runs post-install and post-update Composer scripts, adding execution during dependency operations and warranting review beyond ordinary metadata-only packages.
There are no open issues or pull requests and no recent issue or pull-request activity, providing little evidence of community maintenance.
The repository has zero stars and forks and one watcher; this is weak supporting evidence, but popularity alone does not determine health.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version * | — | — |
mck89/peast Version ^1.17 | — | — |
irmmr/rtlcss Version ^1.4 | — | — |
nesbot/carbon Version ^3.10 | — | — |
timber/timber Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.