The package is small, clearly licensed, and tied to a matching organization repository with limited runtime dependencies. Its sole release and repository activity date to December 2016, leaving substantial abandonment and compatibility risk.
40%
Total Score
50
100
60
50
This is the only release, published on December 15, 2016, with no releases in the last 12 months. That long period without a new release is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since December 2016. This strongly increases abandonment risk.
The published artifact has no README, tests, or changelog, but this is a small library artifact and the repository does contain a README. The absence of tests and changelog still limits transparency, though it is secondary to the age of the project.
The repository is not archived, which is a positive sign, but its last push was on December 16, 2016 and does not offset the prolonged inactivity.
The repository has no security policy. For a small, long-inactive library this is a transparency gap, though it is less significant than the absence of recent release and commit activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.3 | — | — |
nesbot/carbon Version ~1.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.