Risky to adopt: the package has had no release or repository activity for about 10 years and provides almost no consumer documentation. Its tiny scope and MIT license reduce some concern, but there is little evidence of ongoing maintenance or project transparency.
38%
Total Score
0
100
63
75
The latest release was published about 10 years and 9 months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, even though the package is not marked deprecated.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the package's long release hiatus. No provided activity signal compensates for this lack of current maintenance.
The release contains only three files, including a single source file and composer metadata. This may fit a very small library, but it provides little visible project structure to support confidence in long-term maintenance.
The artifact has no README, which is a real transparency and integration gap for a library, while the absence of tests and a changelog in the published artifact is normal packaging practice. The repository also reports no tests or changelog, limiting maintainability evidence.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these counters provide no supporting evidence for maturity or active community use.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.