It includes a README, tests, and only one runtime dependency, keeping integration simple. Registry and repository metadata show no deprecation, but no security policy or scanning is provided.
42%
Total Score
50
100
69
75
The latest release was published in April 2015, with no releases in the last 12 months. This long period without releases is strong evidence of abandonment risk.
The registry lists one publishing maintainer. That is a limited publishing base, and the absence of recent releases makes continuity harder to establish.
There are no open issues or pull requests and no issue or pull request activity in the last month. Combined with the old release history, this supports a maintenance concern rather than showing active stewardship.
The repository has 2 stars, 1 fork, and no watchers, providing little supporting evidence of community adoption or external review. Popularity is only supporting evidence, so this does not determine the verdict alone.
Composer is used for builds, but no security-scanning tooling is present. For a package handling verification tokens, that limits transparency into ongoing security maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.