The package includes tests, a README, and no runtime dependencies. Its documentation explicitly says the validator is partially implemented, while the source and release history have been inactive for about 13 years.
18%
Total Score
0
38
This is the only release, published about 13 years ago, with no releases in the last 12 months. That provides strong evidence of abandonment for a library dependency.
The repository recorded no commits and no active maintainers in the last 3 months, and its last push was in September 2013. The long-standing absence of source activity is not compensated by the repository being unarchived.
The package has a README and tests, which are useful transparency and quality positives, but the README explicitly describes the validator as partially implemented and lists several unfinished features.
Composer build tooling is present, but no security scanning tooling is reported. This is a modest transparency gap, though it is secondary to the project's prolonged inactivity.
The assessed release remains v0.0.1 and is not a stable major release. Combined with the single-release history, this indicates an immature project rather than a maintained stable API.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.