Its MIT license, minimal runtime dependency, organization backing, and security policy support straightforward use. The repository is not archived, but the long release gap and no recent commits make future fixes unlikely.
60%
Total Score
75
100
86
100
The package has had no release for nearly six years, despite 28 releases overall. That is a meaningful maintenance concern for a dependency, although its narrow legacy-polyfill purpose may require few changes.
There were no commits or active maintainers in the preceding three months, reinforcing the concern that maintenance has slowed substantially.
The project uses Composer for its build process. No security scanning tools were detected, but that is a modest hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.