The MIT license and matching repository make its provenance clear, while the small dependency set limits transitive exposure. It is not deprecated or archived, but adoption carries substantial maintenance risk.
42%
Total Score
50
100
69
50
The package has had no release in more than eight years, despite 20 historical releases, indicating prolonged abandonment rather than an actively maintained release line.
The repository recorded zero commits and zero active maintainers in the last three months; combined with the last push in February 2018, this is strong evidence of inactivity.
The artifact and repository each contain only three files, including one implementation file; this is unusually minimal for a library and leaves little evidence of ongoing project maturity.
The package includes a readable README, which helps consumers, while its lack of tests and changelog is a concern for this small library; absent tests reduce confidence in future compatibility.
The repository has one star, zero forks, and one watcher, providing no meaningful community evidence to compensate for its inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
smoothphp/contracts Version 1.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.