The project has had no release in over two years and no commits in the last three months. Its MIT license, clear README, matching repository, and stable version offset the limited maintenance and testing evidence.
58%
Total Score
50
100
88
75
The latest release was over two years ago, with no releases in the last 12 months; this is a meaningful maintenance concern for a dependency.
The repository recorded no commits and no active maintainers in the last three months, indicating currently inactive development.
Composer is used for the build, but no repository security scanning tools were detected, leaving a modest transparency and maintenance gap.
No GitHub Actions workflows were present, so there are no detected workflow hazards; this also provides no evidence of automated build or security checks.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.