Its BSD-2-Clause license and small, coherent Composer package are clear positives. The organization-backed repository is not archived, but the thin documentation and absent tests leave little support for adoption.
38%
Total Score
50
100
63
75
The latest release was published in August 2016, and there have been no releases in roughly 10 years. The package has only three releases, making current maintenance and compatibility uncertain.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the repository's last push occurring in August 2016. This is strong evidence of abandonment.
The artifact includes a very short 90-character README saying documentation is forthcoming, while the repository has no tests or changelog. The small package may be simple, but consumers receive little guidance or verification evidence.
The linked repository has no security policy. This is a maintenance and disclosure gap, though it is secondary to the much older release and commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mrclay/minify Version ^2.2 | — | — |
sw2eu/load-common Version ^0.9.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.