Tests, a changelog, and recent repository commits provide useful maintenance evidence. The release gap, single active contributor, and absent security policy leave meaningful continuity and disclosure concerns.
68%
Total Score
83
86
75
The package includes tests and a changelog, and the repository also has both, supporting basic project maturity. The published artifact has no README, which is a minor usability gap for a library.
The package has 21 releases overall, but none in the last 12 months and its latest release was over a year ago. This weakens confidence in ongoing release maintenance despite its previously regular cadence.
One contributor made all 15 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on one person.
No repository security policy was found, leaving disclosure and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version 1 - 3 | — | — |
rybakit/msgpack Version ^0.9.1 | — | — |
myclabs/php-enum Version ^1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.