The package includes a clear MIT license, a substantial README, and tests. Its single registry maintainer and absent security policy leave limited support and disclosure capacity.
38%
Total Score
33
100
69
88
The package has only one release, published over seven years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency.
There were no commits and no active maintainers in the last three months. This supports the broader indication that ongoing maintenance is absent.
Only one registry account has publishing access. That is a narrow publishing base, with no provided evidence of broader maintainer capacity to compensate for the inactive project.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This offers no substantial institutional backing to offset the narrow maintainer base.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stratadox/immutable-collection Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.