The package contains a small PHP implementation and has no install scripts, keeping its operational surface simple. Consumer documentation and repository security controls are absent, and the license metadata conflicts with the bundled license file.
38%
Total Score
0
50
75
This is the package's only release, published over seven years ago, with no releases in the last 12 months. That indicates a strong abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the old last push, this is evidence of inactive development.
The manifest declares BSD-3-Clause, while the bundled license file is recognized as MIT. The presence of a license file is positive, but the mismatch creates legal ambiguity.
The release includes GitHub release notes, documenting this version. The missing README, tests, and changelog are not all expected in a published Composer artifact, but the absent README reduces consumer guidance for a library.
The repository name does not match the package name, and no README package reference was found. This weakens confidence that the linked repository clearly documents ownership of this package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.