The package is small and cleanly scoped, with one runtime dependency and no install-time scripts. Organization ownership and a matching repository add accountability, but missing tests, consumer documentation, and a security policy limit transparency.
43%
Total Score
75
100
67
83
The latest release was published over six years ago, with no releases in the last 12 months; the 37-release history shows prior activity but not current maintenance.
The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The missing README matters for a library consumers must integrate, while missing tests and changelog are weaker concerns for published package contents.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a dormant project, though it does not prove abandonment by itself.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external sign of adoption or community backup.
Composer is used as the build tool, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.