The repository has been inactive since July 2024, with no recent commits or issue resolution. Licensing, release notes, package alignment, and workflow analysis are reassuring, but missing security scanning and unpinned actions add maintenance risk.
62%
Total Score
38
100
81
50
The repository recorded zero commits and zero active maintainers in the last three months, which is the strongest evidence of current maintenance risk.
One registry publishing maintainer creates a thin publishing base, although this is supporting evidence rather than proof of project abandonment.
The repository is owned by an individual account rather than an organization, so the single-maintainer publishing picture is not compensated by visible organizational backing.
The package has 63 releases since March 2020, but it has had no release in the last 12 months, indicating a substantial maintenance pause.
There are 14 open issues and 7 open pull requests, with no new or closed issues or merged pull requests in the last month, suggesting unresolved project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.7 | — | — |
kreait/firebase-php Version ^5.0 | — | — |
minishlink/web-push Version ^7.0 | — | — |
spomky-labs/base64url Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.