The package includes tests, a README, an MIT declaration, and no install-time scripts. Its very small adoption and single-maintainer project provide little evidence of ongoing support, while the repository lacks a security policy.
42%
Total Score
50
72
75
The package has only one release, published more than 11 years ago, with no releases in the last 12 months. This is strong evidence of stagnation for a dependency.
The registry lists one maintainer. For a user-owned project this indicates a thin support base, especially alongside the old release history, though it is not evidence of a registry access problem by itself.
The registry namespace and repository owner are the same individual account, showing a consistent ownership link but no organizational backing to compensate for the thin maintainer base.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful community or support signal.
Composer is used as a build tool, which is appropriate for this PHP package. No security scanning tooling is present, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.