35%
Total Score
50
61
67
Only one release exists, published over 13 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository is not archived, but its last push was over 13 years ago, reinforcing the absence of active maintenance.
One registry maintainer is consistent with a user-owned project, but it leaves a thin publishing base with no evidence of broader maintenance capacity.
The artifact and repository each contain only four files, including the implementation, README, and Composer manifest. This is transparent but provides little supporting project structure.
The repository is owned by the same individual user as the registry namespace, providing consistent ownership but no organizational backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.