Its MIT license, repository tests, and release notes make the package easier to inspect. The broad runtime dependency set adds upkeep burden, while the small repository audience limits independent validation.
55%
Total Score
0
50
88
50
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the wider pause since the August 2025 release and raising abandonment risk.
Twenty-nine runtime dependencies create a comparatively broad maintenance and compatibility surface for consumers, even though the dependency list is explicitly declared.
The package has 59 releases since July 2020, but none in the last 12 months; the mature history partly offsets the recent pause, which is still a maintenance concern.
The repository has only 2 stars, 0 forks, and 1 watcher, so there is little visible community adoption or independent validation to compensate for stalled activity.
No security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/link Version ^2.0 | — | — |
psr/cache Version ^3.0 | — | — |
symfony/yaml Version ^7.1 | — | — |
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.