Usable with caveats: the package is small, clearly licensed, tested, documented, and has no deprecation or install-script concerns. However, it has had no release or commit activity since August 2021, leaving maintenance and compatibility uncertain.
58%
Total Score
50
100
81
88
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely thin maintainer base and provides limited continuity if the author becomes unavailable.
This is a mature package by age but has only one release, published in August 2021, and none in the last 12 months; the lack of subsequent releases raises maintenance and compatibility concerns.
There were zero commits and zero active maintainers in the last three months, indicating that development has stopped or is inactive and leaving current compatibility issues less likely to be addressed.
Composer is used as the build tool, but the repository has no security scanning tooling; for this small package this is a transparency gap rather than evidence of a severe defect.
The repository is not marked archived, but it was last pushed in August 2021, consistent with the package's long period without updates.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.