The repository includes tests, regular releases, and a stable version history. Its single-maintainer publishing setup, absent license, quiet recent commits, and unpinned workflow actions warrant extra ownership and build-integrity checks.
64%
Total Score
75
100
83
67
No declared license, license file, or repository license file was detected, leaving the legal terms for reuse unclear.
There were no commits and no active maintainers in the last 3 months, indicating a recent pause in development despite the recent registry release history.
The repository has 1 star, 1 fork, and 1 watcher; this is weak supporting evidence, although low popularity alone does not establish poor maintenance.
Composer build tooling is present, but no security-scanning tooling was detected, leaving automated vulnerability checks unconfirmed.
The repository has no security policy, so there is no documented path for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version >=2.64 || ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.