This is a mature, licensed Composer package with 44 releases over roughly 10 years, a stable non-prerelease 3.0.0, repository-backed source, tests, a small runtime dependency footprint, and read-only CI permissions with security scanning. The main concern is current maintenance capacity: only one release occurred in the last 12 months and there were no commits or active maintainers in the last 3 months; repository popularity and issue resolution are also very limited. It is usable for adoption, but dependents should verify that the 3.0.0 compatibility claims and future support meet their needs.
68%
Total Score
50
100
89
90
Only one registry account has publish access. This is not itself evidence of poor health, but it leaves limited visible publishing redundancy when combined with the absence of recent repository activity.
The repository is owned by an individual user rather than an organization. This is a legitimate ownership model, but it offers less visible institutional backing and redundancy for long-term maintenance.
The package has existed for about 10 years and has 44 releases, supporting maturity. However, only one release was published in the last 12 months, which indicates a slower current release cadence.
There were zero commits and zero active maintainers in the last 3 months. Despite the repository being unarchived and recently pushed, the measured activity indicates a meaningful current-maintenance gap.
There is one open issue and one open pull request, with no issues or pull requests created or closed in the last month. This provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.