The repository contains a useful README and a substantial test suite, and it has no install-time scripts. The license metadata conflicts with the detected MIT license, while the missing security policy adds a transparency gap.
46%
Total Score
50
75
75
The package includes a license file and the repository also has one, but the manifest declares BSD 3-Clause while the artifact license is detected as MIT; the mismatch should be resolved before adoption.
The last release was about 11 years ago, with no releases in the past 12 months; the seven historical releases show an earlier burst but do not offset the prolonged silence.
The repository recorded no commits and no active maintainers in the past 3 months, consistent with the long release gap and indicating likely abandonment risk.
There were no new or closed issues and no merged pull requests in the past month, with four issues still open; this provides no evidence of current maintenance.
Composer is used for the build, but no security scanning tools are present; this is a modest hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.