Risky to adopt: this stable package has had no release or repository activity since September 2017, with no tests or README to support maintenance or use. It is licensed and not deprecated or archived, but the long abandonment risk outweighs its small, simple codebase.
43%
Total Score
0
100
69
83
The package has only one release, published about 9 years ago, and has had no releases in the last 12 months. This is strong evidence of abandonment risk, although the package may be intentionally stable.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the absence of releases since 2017. The repository is not archived, but there is no recent activity demonstrating ongoing maintenance.
The artifact has no README, while the source repository also has no tests or changelog. Missing tests and changelog can be normal for a tiny library, but the missing README reduces transparency and makes integration harder.
The repository has 0 stars and 0 forks and only 1 watcher, providing little evidence of external review or community support. Low popularity alone does not make a small stable package unhealthy, but it offers no compensation for the long inactivity.
Composer is used for the project, providing basic build/package tooling, but no security scanning tools are configured. The simple five-file package limits the significance of this gap, so it is a secondary concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.