It includes tests, a small runtime dependency set, and no install-time scripts; the declared LGPL-3.0 license is clear. The repository could not be found, so current maintenance and provenance cannot be verified.
42%
Total Score
50
100
70
100
The package has had no releases in over five years, despite 21 releases since 2018. This is a substantial abandonment risk for a library.
Two registry maintainers provide some publishing continuity, but registry access does not demonstrate active development and cannot compensate for the prolonged release inactivity.
The artifact contains tests, which is a small positive, but no README is present for a library that consumers must integrate. The missing changelog is not a concern because published artifacts are not expected to carry one.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
spinit/util Version @stable | — | — |
webmozart/assert Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.