It has a clear MIT license, tests, a readable package, and a repository that matches its name. Its maintenance has effectively stopped, and it lacks a security policy, so future compatibility and fixes are uncertain.
40%
Total Score
25
100
72
88
The package has four releases but none in the last 12 months, and its latest release was on June 28, 2017; roughly nine years without a release is strong abandonment evidence.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance capacity.
The registry namespace and repository owner match, but both are associated with an individual account rather than organization backing, leaving a thin ownership base.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence only, but these low counts provide little external maintenance signal.
Composer is used for the build, which is appropriate for this package, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.