The MIT license and single runtime dependency keep the package straightforward to adopt. Its 12-character README, absent tests, and lack of security policy leave important maintenance and usage gaps.
38%
Total Score
100
64
75
The package has had only one release, published over 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The artifact includes a README, but it is only 12 characters long and provides no useful integration guidance; the absence of tests and a changelog in the published package is normal and not penalized.
Composer is used for builds, but no security-scanning tooling is present. For an old package with no recent activity, this leaves maintenance and vulnerability-detection practices unclear.
The repository is not archived, which is a small positive, but its last push was over 9 years ago and does not offset the inactive release history.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds transparency risk, especially for a package that has been inactive for years.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.