The source includes tests, a clear MIT license, and no install-time scripts. However, there have been no releases since June 2015 and no commits in the last three months; absent security scanning and a single publisher add further maintenance risk.
38%
Total Score
67
100
71
83
The latest release was in June 2015, with no releases in the last 12 months, indicating roughly 11 years without published maintenance. Four total releases provide some history but do not offset the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of adoption or an active user community. Popularity is only supporting evidence, so this reinforces rather than determines the score.
Composer is used for the build, but no security scanning tools are configured. That weakens ongoing security hygiene, though it is secondary to the package's much older maintenance history.
The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This adds a transparency gap for a package intended as a reusable cache library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
michaldudek/foundation Version >=0.9,<2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.