The package has a clear README, repository tests, a matching source tree, security tooling, and MIT licensing. Those positives do not offset its withdrawn registry status and archived source repository, so new adoption carries substantial abandonment risk.
12%
Total Score
25
69
67
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on the package.
The repository recorded zero commits and zero active maintainers during the last 3 months. Together with the archived status, this strongly indicates that maintenance has stopped.
The linked repository is archived, despite having been pushed on April 28, 2025. An archived project is not an active maintenance base for future fixes or compatibility work.
The package has a long history with 87 releases, but it had no releases in the last 12 months and its latest release was on March 20, 2025. Past maturity does not compensate for the current loss of release activity.
There are 6 open issues, with no new or closed issues and no pull requests in the last month. This supports the conclusion that the project is no longer being actively maintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
darsyn/ip Version ^4 || ^5 || ^6 | — | — |
moneyphp/money Version ^3.3|^4.0 | — | — |
laminas/laminas-uri Version ^2.6.2 | — | — |
thecodingmachine/safe Version ^1.3|^2.0|^3.0 | — | — |
egulias/email-validator Version ^2.1.10 || ^3.0.0 || ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.