The repository is not archived, the package name matches it, and it has no install-time scripts. Its one-maintainer setup and minimal tooling still leave little support capacity.
38%
Total Score
50
79
75
No declared license or license file was found, leaving the legal terms for using this dependency unclear.
The package has one registry maintainer, which limits publishing continuity and creates a narrow support base.
The latest release was in September 2019, with no releases in the last 12 months; nearly seven years without a release is strong evidence of abandonment risk.
Composer build tooling is present, but no security-scanning tooling was found; this is a modest transparency and maintenance gap for a long-stale package.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.