The artifact is small, clearly licensed, documented, and has no install-time scripts. Its only release was in January 2021, with no commits or issue progress in the latest three months, so ongoing support is uncertain.
58%
Total Score
50
83
83
Only one release exists, published about five years and eight months ago, with no releases in the last 12 months. That makes current maintenance and compatibility less certain.
The repository recorded zero commits and zero active maintainers in the latest three months. Combined with the old release history, this is meaningful evidence of weak ongoing maintenance.
Only one registry maintainer is listed. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
There are 14 open issues and 7 open pull requests, but no new or closed issues and no pull requests merged in the latest three months. Outstanding work appears inactive.
A Composer build tool is present, supporting reproducible project structure, but no security scanning tooling is reported. The missing scanning is a modest transparency gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.