The source is clearly tied to the package, has a usable README, and declares MIT licensing with no install-time scripts. Maintenance stopped in March 2020, with no releases or commits since, leaving a thin and likely abandoned dependency.
43%
Total Score
50
100
72
83
The package has only 3 releases and none in the last 12 months; its latest release was in March 2020, indicating a long-standing maintenance gap.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the release history and indicating no current maintenance.
A single registry maintainer matches the user-owned project backing, but it leaves little visible publishing redundancy when combined with the absence of recent activity.
The repository has 0 stars and 0 forks, with only 1 watcher; popularity is supporting evidence, but these values provide little evidence of community support.
Composer is used for builds, which fits the package ecosystem, but no security scanning tooling is present; this is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.