It includes a clear license, tests, a README, and a matching source repository. Its pre-1.0 version and lack of security policy leave less reassurance for long-term adoption.
42%
Total Score
64
75
The package has had no releases in the last 12 months, and its latest release was nearly nine years ago; this is strong evidence of abandonment risk.
The repository has 1 star, 0 forks, and 2 watchers, providing little supporting evidence of broad use or an active community.
The repository is not archived, which is a modest compensating signal, but it was last pushed nearly nine years ago and does not offset the inactive release history.
The repository has no security policy, leaving disclosure and response practices undocumented; this is a transparency gap, though not a severe risk by itself.
The latest version is pre-1.0, so compatibility expectations are weaker even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
beberlei/assert Version ^2.5 | — | — |
monolog/monolog Version ^1.19 | — | — |
smsapi/php-client Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.