The small dependency surface and included tests make the code easier to assess. Its maintenance record is very old, with no releases in the last 12 months and no commits in the last 3 months, so pinning this release carries abandonment risk.
42%
Total Score
25
100
75
75
The package is about 13.6 years old but has only two releases, with no releases in the last 12 months; this strongly suggests it is no longer actively maintained.
There were no commits and no active maintainers in the last 3 months, reinforcing the evidence that maintenance has stopped.
The package and repository are owned by the same individual account, providing consistent ownership but no organizational backing to compensate for the inactive history.
The repository uses Composer, but it reports no security scanning tools; this is a modest transparency and maintenance gap, especially alongside the lack of recent activity.
The linked repository is not archived, but its last push was in August 2020, so the repository remains available without showing current maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.