Stop words
55%
Total Score
50
79
75
The manifest declares MIT, while the bundled license file is identified as Apache-2.0; although a license is present, this mismatch creates uncertainty about the terms consumers receive.
All four releases appeared on July 14, 2023, with no releases in the following 12 months and roughly 3 years since the latest release. This suggests limited ongoing maintenance, though a static data package may need fewer updates.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the long release gap and indicating little current maintenance capacity.
There were no new or merged pull requests and no issue activity in the last month. This reinforces the limited evidence of active support, although the package's narrow scope reduces the impact somewhat.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap, particularly alongside the inactive project, though this small data package has limited build complexity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.