Documentation, tests, licensing, and a security policy are in place. The small dependency set and absent install scripts reduce integration and installation concerns, but ongoing support remains the main limitation.
58%
Total Score
50
100
72
100
The package has had no releases in the last 12 months, and its latest registry release was about 8 years ago. This is substantial evidence of stalled maintenance, despite the package having 10 releases overall.
There were no new issues or pull requests in the last month and no merged pull requests, indicating little recent development activity. The absence of an open-issues count limits how strongly this can be interpreted.
The repository has zero stars and forks and only two watchers. Popularity is not required for a healthy package, but these counters provide no supporting evidence of an active community.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency gap rather than a severe dependency risk.
The linked repository is not archived, which preserves a path for maintenance. However, its last push was about 3 years ago, reinforcing the release-history concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
simplesamlphp/saml2 Version ~1.7 | — | — |
whitehat101/apr1-md5 Version ~1.0 | — | — |
robrichards/xmlseclibs Version ~1.4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.