The package is small and clearly documented, with tests, a matching repository, and a permissive license. Its maintenance record is the main concern, with no registry releases for over eight years and no recent commits; the missing security policy adds a smaller transparency gap.
52%
Total Score
63
100
75
83
The package has had only two releases, both on December 7, 2017, with none in the last 12 months; no release has appeared for over eight years, which materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has seen no meaningful development for years.
There has been no issue or pull-request activity in the last month, and one issue remains open; this provides no evidence of current support.
The repository uses Composer, but no security scanning tools were detected. For this small package that is a modest transparency gap rather than a standalone severe risk.
The repository is not archived, but its last push was on February 26, 2020, so the unarchived status does not compensate for the broader inactivity by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.