The package includes tests, a README, and a declared GPL license. Its small security and contributor footprint leaves less room for dependable long-term support.
58%
Total Score
50
100
86
50
Only two releases exist, with the latest published over six years ago and no releases in the last 12 months. Recent repository activity provides some evidence of continued interest, but does not replace a current registry release.
One contributor made all recent commits, leaving maintenance dependent on a single active person and increasing continuity risk.
The repository recorded only one commit in the last three months, showing some recent maintenance but a very low pace for ongoing support.
The project uses Composer and Robo, but no security-scanning tools were detected. This is a hygiene gap rather than evidence of an unsafe release.
The repository has no security policy, reducing transparency about how users should report vulnerabilities and how they may be handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sweetchuck/cdd Version ^0.0 | — | — |
consolidation/robo Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.