The repository remains identifiable, licensed, tested, and unarchived, with no install-time scripts or registry deprecation. Pin the workflow actions before relying on its build process, and expect limited maintenance responsiveness.
61%
Total Score
67
100
83
75
The registry namespace and repository are owned by the same individual account, providing consistent ownership context but not the stronger organizational backing of a maintained team.
The package has 11 releases since February 2022, but none in the last 12 months; its latest release was in November 2024, indicating a long release gap.
There were no commits and no active maintainers in the last three months, which is a concrete sign of currently limited maintenance capacity.
The repository has only 2 stars and 2 forks, indicating limited external adoption and review, but popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0 | — | — |
greenter/ubl-validator Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.