The stable API and minimal runtime dependency reduce integration friction. However, the package has no license, no release in nearly ten years, and its repository could not be found, leaving maintenance and provenance difficult to verify.
31%
Total Score
100
50
75
No license is declared, detected, or included as a license file, leaving developers without clear permission to use or redistribute the package.
The package was last released in December 2016 and has had no release in the past 12 months, which is strong evidence of abandonment despite its age and 11 total releases.
The artifact is extremely small, containing only composer metadata and two source files. That may reflect a focused library, but with no README or repository evidence it provides little transparency about maintenance or intended use.
The artifact contains no README, which makes a small library harder to integrate; the absence of tests and a changelog is normal for a published artifact and is not penalized.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.