The repository includes tests, a clear MIT license, and matches the package name. Its single maintainer, minimal adoption, and absent security policy provide little evidence of ongoing support.
40%
Total Score
25
75
75
This package has only one release, published more than 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency at this version.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the repository's last push being in October 2017. This indicates strongly stalled maintenance.
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance record.
The repository has 0 stars, 2 forks, and 1 watcher, indicating very limited visible adoption. Popularity is supporting evidence, but this adds to the uncertainty around long-term support.
Composer is used for builds, but no security-scanning tools are present. The missing scanning is a hygiene gap, though it is less significant than the stalled maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ikkez/f3-flash Version ^1.0 | — | — |
ikkez/f3-assets Version ^1.1 | — | — |
ikkez/f3-cortex Version ^1.5 | — | — |
firebase/php-jwt Version ^5.0 | — | — |
rafamds/f3-falsum Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.