Usable with caveats: this is a small, stable interface package, but it has had no release or commit activity since March 2016. The linked repository does not match the package name or mention it in its README, so verify that the source repository and package are correctly connected before adopting it.
52%
Total Score
50
100
69
90
The latest release was in March 2016, with no releases in the last 12 months; this is a substantial maintenance and abandonment concern, although the package has 14 historical releases.
There were zero commits and zero active maintainers during the last three months, consistent with roughly a decade of inactivity since the last release. This is the strongest adoption concern, despite the package's narrow scope.
There are no open issues or pull requests, and no recent issue or pull-request activity. For a small stable interface package this is not inherently negative, but it offers no evidence of ongoing maintenance.
The repository name does not match the package name and its README does not mention the package, creating a meaningful risk that the linked repository is not actually the package's source. The shared t4web organization partially supports the link but does not resolve the mismatch.
Composer build tooling is present, but no security scanning tools are configured. The lack of scanning is a transparency gap, though the repository's small, static interface-only scope limits its practical impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.