The package has a clear MIT license, a matching repository, and a usable README. Its maintenance evidence is weak, with no recent development, few users, and no security policy, so future compatibility and support are uncertain.
38%
Total Score
25
63
50
The package has had no release in more than eight years; all seven releases arrived within a very short initial period, indicating long-term abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being more than seven years ago.
Four issues remain open, while no issues or pull requests were created or closed in the last month, suggesting unresolved maintenance needs.
The repository has zero stars and forks and only two watchers, providing little evidence of a broad user or contributor community to compensate for the inactive maintainer.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that has not been maintained recently.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phlak/config Version ^3.0 | — | — |
nesbot/carbon Version ^1.22 | — | — |
povils/figlet Version dev-master | — | — |
league/climate Version ^3.2 | — | — |
symfony/console Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.