The package is small, licensed, tested, and has no install-time scripts or runtime dependencies beyond PHP. Its organization backing does not offset the lack of activity since 2018, so future fixes are uncertain.
42%
Total Score
50
100
57
75
The package has seven releases but none in the last 12 months; its latest release was on January 30, 2018, indicating prolonged release inactivity.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive since 2018.
The repository name does not match the package name and its README does not mention windwork/util, so the repository-to-package relationship is not clearly established.
Composer is used for builds, but no security scanning tooling is configured; the small, old project has some build structure but limited security-process transparency.
The repository is not archived, but its last push was on January 30, 2018; the prolonged inactivity is more directly reflected in commit activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.