The package has tests, a clear MIT license, and a matching maintained repository. Its zero commits in three months, no releases in 12 months, and explicit legacy-only status limit confidence in future support; the missing security policy adds a smaller transparency gap.
58%
Total Score
75
79
75
The artifact includes a substantial README and tests, and this exact version has GitHub release notes; the notes clearly state the fork is maintained only for legacy projects.
The package has only 3 releases over about 3 years, with no releases in the last 12 months and a median interval of about 316 days, indicating slow maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a concrete sign that ongoing development capacity is currently limited.
Composer and Phing provide build tooling, but no security scanning tools were detected, leaving a modest verification gap for a library that processes background jobs.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~2.0|~3.0 | — | — |
colinmollenhour/credis Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.