The package includes tests and a README, but its license metadata conflicts with the repository license. The lone maintainer, absent recent commits, and missing repository reference make long-term support and package ownership uncertain.
38%
Total Score
25
67
75
This package has only one release, published in January 2018, with no releases in the last 12 months. That is strong evidence of an unmaintained release line.
There were no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating substantial abandonment risk.
The manifest declares GPL 3.0 while the repository license file is detected as MIT, leaving the release's licensing terms unclear despite a repository license being present.
One registry maintainer is consistent with a small personal project, but there is no organizational backing shown to compensate for the lack of recent activity.
The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository belongs to the published package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
myclabs/php-enum Version >=1.5.2,<2 | — | — |
symfony/var-dumper Version ^3.4 | — | — |
chippyash/attributes Version ^1.0 | — | — |
chippyash/strong-type Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.