Its modest dependency set and lack of install-time scripts reduce operational risk. The package is not deprecated, but one maintainer and only two releases provide little evidence of ongoing support.
38%
Total Score
100
40
75
The manifest declares a proprietary license, with no detected license text or license file. That creates a real adoption and redistribution concern for an open-source dependency.
Only two releases were published, both within minutes of each other, and there have been no releases for more than three years. This provides weak evidence of ongoing maintenance.
The package contains only six files, centered on three source files and Composer metadata. That compact structure is not inherently unsafe, but it offers little documentation or visible project context to compensate for the sparse release history.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README makes this small library harder to understand and integrate.
The latest version is 0.0.2 and the package has not reached a stable major version, which suggests limited maturity even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.