It is small, MIT-licensed, tested, and has no install-time scripts. Those positives do not offset the package's abandonment and withdrawal from active use.
8%
Total Score
33
100
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe adoption risk.
The latest release was in January 2016, and there have been no releases in over 10 years. This strongly indicates abandonment rather than merely a slow release cadence.
The linked repository is archived and was last pushed in January 2016, indicating the source project is no longer maintained.
The artifact includes tests and the repository also has tests, which supports basic project maturity, but the published package has no README for consumers.
The repository name does not match the package name, and no README mention was available, so the package-to-repository relationship is less transparent than expected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
toxygene/stream-reader Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.