It includes a README, uses Composer, and runs no install-time scripts; however, the MIT license file conflicts with the proprietary manifest declaration. Its single-user project has had no commits or releases since April 2019, leaving maintenance and compatibility uncertain.
38%
Total Score
25
60
100
The package has five releases, but none in the last 12 months and its latest release was in April 2019, about 7 years ago. This strongly indicates an inactive release stream.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity for about 7 years.
An MIT license file is present, so the artifact is licensed, but the manifest declares it as proprietary. The mismatch creates avoidable uncertainty about the effective license.
Only one registry maintainer is listed. This is a thin publishing base, and the repository is owned by a personal account rather than an organization with broader visible backing.
Version v0.5 is not a stable major release, which adds compatibility uncertainty for a package that has not been updated since 2019.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.