The project includes repository tests and a clear MIT license, with no install-time scripts. Its small dependency surface and recent release help, but limited activity and missing security policy warrant care.
67%
Total Score
63
100
88
75
The package is over nine years old with 13 releases, but only one release in the last 12 months; this suggests modest rather than strong ongoing maintenance.
All one recent commit came from a single contributor, so maintenance depends heavily on one person; organization backing provides some handoff capacity but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating limited recent development activity despite the recent package release.
The repository has nine open pull requests, with no new or merged pull requests in the last month; the unresolved backlog is a maintenance concern.
Composer is used for builds, but no security-scanning tools are detected, leaving supply-chain hygiene less independently checked.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.