The package is clearly identified, licensed, tested, and has a focused dependency set. Its release history stopped nearly 10 years ago, repository work stopped over 5 years ago, and no security policy is present; pinning this version carries meaningful abandonment risk.
48%
Total Score
50
100
79
75
The latest release was published in July 2016, with no releases in the last 12 months. This is a substantial maintenance concern, though the package has a documented history of 12 releases.
There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this indicates that maintenance has effectively stalled.
There were no new or closed issues or pull requests in the last month, while two issues and two pull requests remain open. This is consistent with low current project activity.
The repository uses Composer, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not a standalone dependency blocker.
No repository security policy was found. This weakens vulnerability-reporting transparency, although it is less significant than the long period without releases or commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.