The README is thorough, the package has a small and clear file tree, and its MIT declaration and Composer dependencies are straightforward. Its lone registry maintainer, absent security tooling, and very small repository footprint provide little evidence of ongoing support.
52%
Total Score
25
71
50
The package has only 2 releases, with none in the last 12 months, and the latest release was on August 17, 2020. This is strong evidence of a long-unmaintained release line despite the package not being deprecated.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since August 2020. The repository is not archived, but that does not offset the absence of recent work.
Only 1 registry account has publish access. Project backing identifies an organization-owned repository, which makes a short registry maintainer list normal publishing hygiene, but there is still no observed activity to show active support.
The repository has 1 star, 0 forks, and 1 watcher, so there is little visible community adoption or outside support. Low popularity is supporting evidence rather than a verdict by itself, but it reinforces the maintenance concern.
The repository uses Composer but has no security scanning tools. That is a modest hygiene gap for a package handling login state, though it is not evidence of a vulnerability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webiik/token Version ^1 | — | — |
webiik/cookie Version ^1 | — | — |
webiik/session Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.