Its documentation is limited to a brief README, with no tests or security policy to support ongoing use. The package otherwise has a valid license and no install-time scripts.
42%
Total Score
25
75
67
The package has only one release, published about two years ago, with no releases in the last 12 months. This is strong evidence of limited maturity and maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. This materially raises abandonment risk.
One registry maintainer creates a thin publishing base, although the linked repository belongs to the same individual, so ownership is at least clear.
The artifact and repository each contain only three files, including a README and composer manifest, with no apparent implementation or test structure. This suggests a very minimal package and limits transparency.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.