Licensing is unclear, which complicates legal adoption and redistribution. The package is small and coherent, with a matching repository, a usable README, no install-time scripts, and no registry deprecation.
38%
Total Score
0
71
100
This package has had only one release, published in November 2018, with no releases in the last 12 months. That long release gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the absence of recent maintenance.
Neither the package nor the linked repository provides a declared license or license file, leaving reuse and redistribution terms unclear.
Composer is used for builds, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/assert Version ^1.3 | — | — |
towersystems/resource Version ^1.0.0 | — | — |
zendframework/zend-http Version ^2.8.2 | — | — |
zendframework/zend-stdlib Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.