Its tests, BSD declaration, and small dependency surface provide a useful baseline. The single maintainer and lack of security tooling leave little evidence of ongoing support.
34%
Total Score
25
100
67
75
The package has had only two releases, with the latest published about 13 years ago and none in the past 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded no commits and no active maintainers in the past three months, consistent with the release history showing no activity since March 2013.
Only one registry account has publishing access. The repository is user-owned rather than organization-backed, so there is little visible publishing redundancy if that maintainer stops working.
The artifact includes tests, which is a small positive, but it has no README; that reduces consumer transparency for a library developers must integrate.
Composer is used for builds, but no security-scanning tool was detected. This is a hygiene gap that adds to the limited evidence of active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.