42%
Total Score
unhealthy
No releases or commits have appeared since January 2025, leaving this small library with clear abandonment risk.
The package has had no releases in the last 12 months, and its latest release was published on January 15, 2025 despite being 640 days old. The earlier burst of 14 releases does not compensate for the prolonged silence.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating a strong maintenance risk.
Only one registry maintainer is listed, so publishing and maintenance depend on a single person. The repository is user-owned rather than organization-backed, providing no shown capacity to absorb that dependency.
The package includes tests in both the artifact and repository, which is a meaningful quality positive. It has no README, reducing consumer guidance for this library, while the absent changelog is normal packaging practice.
Composer is used as the build tool, but no security scanning tooling is reported. That is a transparency and maintenance gap, though it is less serious than the absent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
brick/math Version ^0.12.1 | — | — |
psr/http-message Version ^2.0 | — | — |
webmozart/assert Version ^1.11 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.