The 187-character README offers little guidance, while one maintainer and no security scanning leave limited support capacity. The MIT license, stable version, and absent install scripts reduce adoption friction but do not offset the maintenance concerns.
38%
Total Score
25
100
67
75
Only two releases appeared, both within minutes on October 17, 2024, with no release in about 23 months. This strongly suggests an inactive project rather than an established release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since its initial release period.
The registry lists one publishing maintainer. Because the project backing is a personal user account rather than an organization, this indicates a thin publishing base and limited visible continuity.
A README is present, but it is only 187 characters and provides limited consumer guidance. The exact version has a GitHub release, which is a small transparency positive; missing tests and changelog files in the package are normal packaging practice.
The repository name does not match the package name and its README does not mention the package, so the source relationship is not clearly established. This weakens transparency and makes maintenance evidence less reliable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deployer/deployer Version v6.8 | — | — |
symfony/var-dumper Version 5.4.x-dev | — | — |
illuminate/collections Version >=7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.