The package has no README or security policy, which leaves integration and review poorly supported. Its tiny repository and zero adoption provide little evidence of a durable project.
38%
Total Score
38
50
This is the only release, published about five years ago, with no releases in the last 12 months. That strongly suggests abandonment, with no later release evidence to compensate.
The artifact and repository each contain only five files, all concentrated in a small source tree. That may be sufficient for a minimal library, but provides little visible project depth or maintenance context.
The release includes notes for this exact version, but it has no README, leaving consumers without basic integration guidance. The absence of tests and a changelog in the package is normal packaging practice.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these figures provide no supporting evidence of adoption or a broader user base.
Composer is used for the build, which is appropriate, but no security-scanning tooling is present. For a dependency with no recent maintenance, that leaves an additional review gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.