Message sender by Acfun, Inc.
38%
Total Score
unhealthy
Risky: no release or commit activity since April 2017, leaving maintenance and compatibility uncertain.
The latest release was published in April 2017, with no releases in over 9 years. This is strong evidence of abandonment for a dependency whose compatibility may need ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having been inactive since April 2017.
The artifact includes an Apache-2.0 license file, but the manifest declares the package proprietary. That mismatch requires licensing clarification before adoption.
Only one registry publishing account is listed, and the project backing identifies a user-owned repository rather than an organization. This leaves limited visible maintenance capacity.
The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these low levels provide little external indication of active use or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dekuan/delib Version >=1.0 | — | — |
dekuan/vdata Version >=1.0 | — | — |
symfony/http-kernel Version 2.7.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.