The package has clear licensing, a substantial readable artifact, and modest runtime dependencies. Its source has had no commits or issue activity for over four years, so maintenance and compatibility support are weak.
48%
Total Score
33
100
67
83
The package has made no release in over four years: its latest and only recorded release date is March 2022, with none in the last 12 months. This is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The repository is owned by an individual account rather than an organization, so the small registry maintainer list is not clearly supported by broader project backing.
There were no new or merged pull requests and no issue activity in the last month. While open-issue data is unknown, the observed inactivity adds to abandonment risk.
Composer is used for builds, but no security-scanning tooling is reported. This is a minor hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.