Risky to adopt: this release has not been updated since September 2020, and the linked repository shows no recent commits or contributor activity. It is clearly packaged, licensed, and tested in the repository, but the long abandonment gap outweighs those strengths.
38%
Total Score
33
100
75
75
The package has a substantial history with 293 releases, but its latest release was over 5 years ago and it had no releases in the last 12 months. That prolonged inactivity is a significant maintenance and abandonment concern.
The repository recorded zero commits and zero active maintainers over the last 3 months. Combined with the old last push, this is strong evidence that maintenance has effectively stopped.
The repository is owned by a personal user account rather than an organization, and the registry maintainer list contains only one entry. This leaves a thin visible backing structure for a package that has had no recent activity.
There were no new or merged pull requests and no issue activity in the last month. This provides no evidence of ongoing responsiveness and is consistent with the stale repository.
The repository uses Make and Composer build tooling, showing some project structure, but it has no detected security scanning tools. The tooling is a modest positive while the missing scanning is a hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.