n/a
38%
Total Score
unhealthy
Risky: a single release and no repository activity point to a largely abandoned package.
This package has only one release, published about 5 years and 8 months ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance.
There were no commits and no active maintainers in the last 3 months, and the repository was last pushed about 11 years ago. This substantially increases abandonment risk.
There are no open issues or pull requests and no recent issue or pull-request activity. This provides no evidence of current community maintenance.
The repository has only 3 stars and no forks. This is limited supporting evidence of adoption, though popularity alone does not determine package health.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap rather than evidence of maliciousness.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bear/package Version ~1.0@dev | — | — |
facebook/xhprof Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.