The package is compact, has no install-time scripts, and uses only PHP at runtime. Its source is identifiable and licensed files are present, but the license texts conflict and neither releases nor commits show activity since April 2022.
52%
Total Score
50
100
67
75
The manifest declares MIT and a license file is present, but the artifact detects BSD-3-Clause and GPL-2.0 text instead. This mismatch creates genuine uncertainty about the terms governing the release.
The package has had no releases in roughly four years, with zero releases in the last 12 months. Its stable version and nine total releases provide some maturity, but do not offset the current inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's long release gap. The repository is not archived, but there is no observed recent maintenance.
The linked repository has no security policy. For a small, stable package this is a transparency gap rather than a severe risk, but it gives users no documented vulnerability-reporting process.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.