The MIT license and two runtime dependencies keep adoption straightforward. Organization backing helps, while missing security scanning and unpinned workflow actions leave some maintenance hygiene gaps.
58%
Total Score
75
100
81
75
This is the sole release, published nearly two years ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with a project whose only release was nearly two years ago.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of broad community use; popularity is secondary to maintenance evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated project hygiene.
The repository has no security policy, which makes vulnerability-reporting expectations less transparent for users and maintainers.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.