The README explains installation and use, and the package has a clear MIT license with only one runtime dependency. It lacks tests and a security policy, leaving changes difficult to validate and review.
39%
Total Score
25
100
78
75
This is the package's only release, published over six years ago, with no releases in the last 12 months. That strongly suggests abandonment rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and leaving no evidence of current maintenance.
A single registry maintainer provides little redundancy if the project needs fixes or publishing continuity. The repository is user-owned, so there is no organizational backing shown to compensate for that thin base.
One star and one fork provide almost no independent adoption or review signal. Popularity is only supporting evidence, but this leaves the stale maintenance picture unmitigated.
Composer is used for builds, but no security-scanning tool is configured. That reduces evidence of routine dependency or code review hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.