This is a small, clearly structured PHP package with an MIT license, tests, changelog, complete source-tree alignment, no install-time scripts, a non-archived repository, and no dangerous workflow patterns. However, it is extremely new, has only two releases, no observed commits or active maintainers in the last three months, has a single registry maintainer, minimal repository adoption, and lacks both security scanning and a security policy. The repository was pushed around the latest release, which partly explains the limited activity, but maintenance maturity and long-term support remain unproven; it is usable with caution rather than a strong default dependency.
58%
Total Score
50
100
83
80
Only one account has registry publish access. This does not establish poor maintenance by itself, but it indicates limited observable publishing redundancy for a user-backed project.
The repository is owned by an individual account rather than an organization, so there is no observed organizational backing or maintainer redundancy to offset the single-maintainer signal.
Only two releases exist and the package age is 0 days, with releases separated by roughly 4 hours and 49 minutes; this leaves maturity and release-process consistency unproven.
No commits or active maintainers were observed in the last three months. Because the repository was pushed on the assessment date and the package is brand new, this is partly explained by limited history but still leaves ongoing maintenance unproven.
The repository has 1 star, 0 forks, and 1 watcher, so external adoption is minimal. Popularity is supporting evidence rather than a standalone health verdict, but this offers little validation of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
umityatarkalkmaz/string-helper Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.