The README and MIT declaration make basic use and licensing clear. Only one release exists, and the repository has had no commits for more than six years, with little adoption evidence.
40%
Total Score
25
100
71
83
The package has had only one release, on December 18, 2019, and none in the last 12 months. This leaves no evidence of ongoing release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than six years since its last push. The repository is not archived, but current maintenance capacity is absent.
A single registry publisher is consistent with a small user-owned project, but it provides limited publishing redundancy alongside the lack of recent releases and commits.
The repository has 2 stars, 0 forks, and 1 watcher, providing little supporting evidence of adoption or an active user community.
Composer is used as a build tool, but no security scanning tools are configured. This is a hygiene gap, though the package's very small five-file tree limits its significance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/think Version >=5.0.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.