The package includes a usable README, tests, release notes, and a matching source repository. Its small user base and lack of security scanning add little reassurance for a dependency this old.
38%
Total Score
0
57
88
There has been only one release, published over 13 years ago, with no releases in the last 12 months. This strongly indicates abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for over 12 years.
The repository has 18 stars and 7 forks, showing some historical interest but limited adoption. This is supporting context and does not outweigh the inactive maintenance record.
Composer is used as a build tool, but no security scanning tool is configured. The missing scanning is a modest transparency gap, not a standalone adoption blocker.
The repository is not archived, so it has not been formally marked as discontinued. However, its last push was over 12 years ago, which does not offset the observed inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.