Usable with caveats: this is a small, stable package with a README, MIT declaration, and no install-time scripts, but it has had no release or repository activity since December 2015. Its minimal repository has no tests, security policy, or security scanning, so ongoing maintenance and change safety are uncertain.
53%
Total Score
50
100
78
50
The package has only one release, published about 10 years ago, with no releases in the last 12 months. That suggests a mature-but-abandoned or frozen project rather than active maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in 2015. This materially increases the risk that defects or compatibility issues will remain unaddressed.
The repository has zero stars and forks and only one watcher. Low popularity is not decisive for a small utility, but it offers no supporting evidence of community review or maintenance capacity.
Composer is used as a build tool, which is appropriate for the package, but no security scanning tools are configured. For a small utility this is a transparency gap rather than a severe risk.
The repository is not formally archived, but it was last pushed about 10 years ago. The unarchived status provides little compensation for the observed inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.