The last release and repository activity were over 10 years ago, with no recent commits or active maintainers. A declared BSD-2-Clause license, matching source repository, and no install-time scripts provide some reassurance.
42%
Total Score
0
64
75
The latest release was over 10 years ago, and there have been no releases in the last 12 months; the seven-release history shows the package is effectively dormant.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The artifact has no README, tests, or changelog, while the repository also reports no tests or changelog; the GitHub release for this version offers some release traceability but no notes.
The repository uses Composer, but has no security scanning tooling, leaving a modest transparency and maintenance gap for an actively maintained project.
The repository is not archived, which is a positive counter-signal, but its last push was over 10 years ago and does not offset the observed inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.