It includes tests, a clear README, and an MIT license. Its small dependency set and lack of install scripts reduce adoption friction, but the available project evidence does not show ongoing support.
42%
Total Score
0
100
81
75
The package has 27 releases, but none in the last 12 months; its latest release was published in December 2020, about 5 years and 9 months ago. This strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release hiatus. The repository is not archived, but that does not demonstrate active maintenance.
The repository uses Make and Composer build tooling, but no security scanning tool was detected. The missing scan is a transparency gap, though less important than the prolonged inactivity.
No repository security policy was found. This reduces transparency for reporting and handling issues, adding a secondary concern to the maintenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
anax/commons Version ^2.0.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.