Risky to adopt: the package has had no release or repository activity for nearly eight years, and its low-use, single-person project shows little evidence of ongoing support. It has a real repository, tests, documentation, and no install-time scripts, but those positives do not offset the abandonment risk.
45%
Total Score
50
50
61
90
The package has 13 releases but none in the last 12 months, with the latest release nearly eight years ago. This strongly suggests that maintenance has stopped.
There were no commits and no active maintainers in the last three months, consistent with the repository having been untouched for nearly eight years. This is the strongest evidence of abandonment risk.
The package declares 20 runtime dependencies, including framework, templating, asset, and extension packages. That is a substantial maintenance surface for an already inactive project, although the dependencies match its CMS/application structure.
The package declares a proprietary license in its manifest, so a license declaration is present even though no license file was found. This is not a missing-license transparency gap, but it may restrict use for developers expecting an open-source license.
One registry account has publish access. This is not by itself a maintenance verdict, but combined with the absence of recent release and commit activity it leaves little visible support redundancy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/mail Version ^2.4 | — | — |
latte/latte Version ^2.4 | — | — |
nette/forms Version ^2.4 | — | — |
tracy/tracy Version ^2.4 | — | — |
leafo/scssphp Version ^0.6.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.