58%
Total Score
caution
Usable with caveats: recent release history is offset by three months without commits and no license file.
The package has no declared license, detected license, or license file, and the linked repository also has no license file. This creates a material adoption and redistribution gap.
The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity is concerning for a young 0.x package, even though the release history shows earlier activity.
The repository has zero stars, forks, and watchers, providing no community adoption or outside-review support. Popularity is only supporting evidence, so this lowers confidence more than it determines the verdict.
Composer is used for the build, but no security scanning tool was detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
The repository has no security policy. That reduces transparency about vulnerability reporting and handling, though it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
verdient/logger Version ^0.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.