38%
Total Score
0
100
60
83
The package has had only 3 releases, all concentrated on July 13, 2016, with no releases in the last 12 months. This is strong evidence of abandonment for a package last released over 10 years ago.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since July 2016. No newer maintenance evidence compensates for this.
The artifact contains a license file and the repository also has one, so licensing is not absent. However, the manifest declares Unlicense while the artifact license file is detected as MIT; that mismatch warrants caution.
The repository name does not match the package name and the README does not mention the package, so the source may not clearly belong to this release. The matching repository owner and URL reduce, but do not remove, this transparency concern.
The repository has no security policy. For an inactive application that handles database-backed mail accounts, this reduces transparency around vulnerability reporting and maintenance responsibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ~2.5 | — | — |
symfony/console Version 3.2.1|2.8.8 | — | — |
paragonie/random_compat Version ~1.4|~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.