The package is small and easy to inspect, with an MIT declaration, a README, and no install-time scripts. Its single-maintainer setup, absent security policy, and lack of tests or security scanning provide little evidence of ongoing support.
38%
Total Score
25
63
75
This is the only release, published about five years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a package intended as a reusable library.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2021.
Only one registry maintainer is listed. With user-owned project backing and no recent activity, this leaves a thin apparent support base.
The linked repository name does not match the package name and its README does not mention the package, so ownership of the published package is not clearly established.
Composer is used for the build, which is appropriate, but no security-scanning tool is configured. This is a hygiene gap that adds modest transparency and maintenance risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.