The README and compact package structure make integration straightforward, with no install-time scripts or deprecation notice. Its last release and repository activity were about five years ago, leaving little evidence of ongoing maintenance; the missing security policy adds a smaller transparency gap.
43%
Total Score
63
72
88
The latest release was about five years ago, with no releases in the last 12 months. This strongly raises abandonment risk despite the package having three releases overall.
There were zero commits and zero active maintainers in the last three months, and the repository was last pushed about five years ago. This is the strongest evidence that maintenance has stopped or effectively stopped.
There are no open issues or pull requests and no activity in the last month. This is not inherently unhealthy for a small package, but it provides no evidence of an active support channel alongside the stale releases.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide little external evidence of maturity.
Composer build tooling is present, which fits the package ecosystem. No security scanning tools are configured, a modest transparency and maintenance gap for a package that handles API credentials.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.