The codebase is small and easy to inspect, with tests, a README, and a narrow dependency set. Treat future updates cautiously because maintenance evidence is thin.
60%
Total Score
50
100
88
83
The package has only two releases, with about six years between them, although one release occurred in the last 12 months. This supports a cautionary maintenance assessment rather than abandonment by itself.
The repository had zero commits and zero active maintainers in the last three months. This is the strongest current evidence that ongoing maintenance may be limited.
Composer is used for builds, but no security scanning tooling was detected. This is a modest repository-hygiene gap, not evidence that the package is unsafe.
The repository has no security policy. For a small migration library this is a transparency gap, though it is less significant than the maintenance signals.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.