Usable with caveats: the release is not deprecated or archived and is backed by an organization with a matching repository. The main concern is that it has had no release in over two years, with only four releases overall and very little repository activity or adoption evidence.
64%
Total Score
75
81
83
The package has only four releases since November 2022 and none in the last 12 months; its latest release was published in April 2024, over two years ago. This suggests limited ongoing maintenance, although the package may be intentionally stable.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a stable package, but it also provides no evidence of an active maintenance community.
The repository has zero stars and forks and only one watcher, providing little evidence of broad adoption or external review. Low popularity alone is not disqualifying, but it adds to the uncertainty around this small project.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a transparency gap, though no risky workflow behavior was observed.
The repository has no security policy. For a small library this does not make the release unfit, but it leaves vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.