A tiny audience and no published security process reduce confidence in long-term support. The package is licensed, tested, stable, and free of install scripts, but maintenance evidence is old.
52%
Total Score
25
78
75
There were no commits and no active maintainers in the last 3 months, consistent with the repository having stopped receiving changes around May 2022.
The package and repository are owned by a user account rather than an organization, providing limited visible backing for continuity.
The latest release was about 4 years ago, with no releases in the last 12 months; nine releases show an established history but not ongoing maintenance.
The repository has zero stars and one fork, indicating a very small user footprint; popularity is only supporting evidence, but this offers little external maintenance signal.
Composer build tooling is present, but no security-scanning tools are reported, leaving a modest verification gap for a maintained dependency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.