The stable release has clear documentation and release notes. The MIT declaration and matching repository improve transparency, but this is not a strong choice for a dependency that needs active upstream support.
55%
Total Score
33
81
75
The package has had no registry release in about three and a half years, with zero releases in the last 12 months. Its nine releases and roughly 96-day median interval show prior activity, but the current gap raises maintenance risk.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the older last push, this leaves little evidence of current maintenance capacity.
The package and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it also indicates a relatively thin backing structure for long-term maintenance.
There were no new or closed issues or pull requests in the last month, while two issues and one pull request remain open. This indicates limited recent project activity, though the small backlog is not severe by itself.
The project uses Composer for builds, which is appropriate for a PHP package. No security scanning tooling was detected, leaving a modest transparency and maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.