The README, tests, changelog, and MIT license give consumers useful documentation and a clear legal basis. However, the last release and repository push were about 8 years ago, with only two releases and very little repository adoption; the missing security policy adds to the maintenance concern.
42%
Total Score
67
50
Only two releases exist, both ending about 8 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a library that may need compatibility and bug fixes.
The repository has just 2 stars, 0 forks, and 1 watcher. Popularity is not decisive by itself, but this provides little evidence of a broader maintenance or review community.
The repository is not formally archived, which is a compensating sign, but it was last pushed about 8 years ago and shows no recent maintenance evidence.
No security policy is present. This is a transparency gap for a background-job library, though it is less serious than the long absence of releases and commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
colinmollenhour/credis Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.