The MIT license, matching repository, release notes, and clean install behavior provide basic transparency. The one-person project is extremely small, with little testing or security process to support dependable long-term use.
35%
Total Score
25
75
75
The latest release was in August 2019, with no releases in roughly seven years. This is strong evidence of abandonment risk for a package developers would depend on.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period without releases and indicating no visible maintenance capacity.
Only one registry account has publish access. With no recent repository activity, this leaves the package dependent on a very thin maintainer base.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance signal to offset the inactivity.
Composer is used as the build tool, but no security scanning tools are present. That is a modest process weakness rather than evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.