The MIT license and matching repository make its provenance clear. Its tiny four-file project, absent security policy, and broad runtime dependency set provide little evidence of ongoing support.
35%
Total Score
0
50
75
67
Only two releases were published, both in October 2021, with none in the last five years. That leaves compatibility and maintenance uncertain for a dependency.
The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but that does not show active maintenance.
The package declares 12 runtime dependencies and no development dependencies, including a static-analysis tool, creating a broad runtime compatibility surface for a vendor package.
The artifact and repository each contain only four files, including no source or test tree. This may reflect a dependency bundle, but it provides little transparency into ongoing project work.
The repository has zero stars and forks and only one watcher, offering no meaningful community support signal. Popularity is supporting evidence, but this reinforces the lack of visible activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/dsn Version * | — | — |
vimeo/psalm Version * | — | — |
league/flysystem Version * | — | — |
league/flysystem-memory Version * | — | — |
php-opencloud/openstack Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.