The package contains only two files and has no security policy or security scanning. It is not deprecated or archived, and install-time scripts are absent, but those positives do not offset the maintenance and licensing concerns.
38%
Total Score
0
67
67
Only two releases were published, and none appeared in the last five years; the long release gap indicates likely abandonment.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the absence of releases since July 2021.
Neither the package nor the repository declares or contains a detectable license, leaving the legal terms for reuse unclear.
The release contains only Touch.js and composer.json, providing very little project context or supporting material for consumers.
Composer is used as the build tool, but no security scanning tooling is present; this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.