The MIT license, README, source tree, and release notes make the package reasonably transparent to inspect. Its single maintainer and minimal adoption provide little resilience if maintenance is needed.
38%
Total Score
33
69
75
This is the package's only release, published in April 2016, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no current maintenance capacity.
Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is little visible maintainer redundancy.
There is one open issue and no issue or pull-request activity in the last month. This is limited evidence of unresolved maintenance rather than a severe issue by itself.
The repository has 3 stars and no forks or watchers, providing little supporting evidence of broad community use or contribution capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/behat Version >=3.0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.