A small, tested package with a README, declared license, and no install scripts is easier to inspect. Its beta status and one-person publishing base add little reassurance for a dependency this old.
38%
Total Score
0
63
100
The package has had no releases in about 11 years, with all four releases concentrated within days in March 2015. That strongly indicates abandonment risk despite the early release activity.
There were no commits or active maintainers in the last three months, consistent with a project that has been inactive for years. This is a major maintenance concern.
The repository name does not match the package name and its README does not mention the package. This raises concern that the linked source may not actually represent this release.
The repository has one star, one fork, and one watcher. Low popularity is not decisive for a small package, but it provides little evidence of a broader support community.
The linked repository is not archived, which is a positive sign, but its last push was about 10 years ago and does not offset the inactivity shown elsewhere.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
appserver-io/lang Version ~1.0 | — | — |
appserver-io/server Version ~1.0 | — | — |
appserver-io-psr/epb Version ~1.0 | — | — |
appserver-io-psr/mop Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.