The project has one registry maintainer, no security policy, and no security scanning, which limits oversight. Its small repository and zero adoption metrics also provide little evidence of a mature user base, while the repository remains active rather than archived.
58%
Total Score
25
50
67
50
There were zero commits and zero active maintainers in the last three months. Together with the last push about five months ago, this is meaningful evidence that maintenance has gone quiet.
The package has three runtime dependencies, including the platform extension ext-pcntl and two libraries. This is a manageable dependency surface, though the platform requirement narrows portability.
Only one account has registry publish access. The repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops contributing.
All five releases arrived within about two hours on the same day, with a median interval of about 32 minutes; this shows an immature release history rather than sustained maintenance.
The repository has zero stars, forks, and watchers. Popularity is not required for a small package, but these figures provide no supporting evidence of broad adoption or community review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
h2sf/events Version ^0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.