The package is small and straightforward, with a clear README, MIT declaration, no install-time scripts, and only two runtime dependencies. Its single maintainer, absent tests and security tooling, and minimal project footprint leave little evidence of ongoing support.
42%
Total Score
50
100
75
75
This is the package's only release, published in November 2022, with no releases in the last 12 months; the long gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, matching the stale release history rather than showing ongoing maintenance.
A single registry maintainer provides little continuity if that person stops supporting the package; the repository is user-owned rather than organization-backed.
The package contains only README.md, composer.json, and one source file, making it easy to inspect but providing little evidence of testing or broader project maturity.
The repository has one star, zero forks, and one watcher. Low popularity is supporting evidence only, but it offers no meaningful community signal to offset the lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.