The stable release, matching repository, and simple Composer package make its contents easy to inspect. Years without releases or commits, plus a license mismatch, make long-term support uncertain.
43%
Total Score
0
69
75
The latest release was published on February 17, 2022, with no releases in the following four years; the package has effectively stopped receiving releases.
There were zero commits and zero active maintainers in the last three months, consistent with the absence of releases for more than four years and indicating substantial abandonment risk.
The artifact includes a GPL-3.0 license file, but the manifest also declares proprietary licensing, creating a material license interpretation mismatch.
The repository has zero stars and forks and only one watcher, providing little evidence of a broader support community; this is supporting evidence rather than a verdict by itself.
The repository uses Composer build tooling, which fits the package ecosystem, but it has no security scanning tools, leaving a modest transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.