The four-file package has a README, matches its repository, and adds no install-time scripts. It lacks tests, security scanning, and any demonstrated support for current users.
38%
Total Score
0
64
83
There has been only one release, on January 24, 2017, with no releases in roughly nine years. That is strong evidence of abandonment for a dependency intended for ongoing use.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
No declared license, recognized license text, or license file was found in the package or repository. That creates a real adoption and redistribution concern.
Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance gap, not evidence of malicious behavior.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in this dependency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.