Undo Lorea Threads.
35%
Total Score
unhealthy
Risky: no releases or commits since March 2017, with a repository that does not identify the package.
The package has had only two releases, both in March 2017, and no release in more than 9 years. This is strong evidence of abandonment for a dependency expected to receive maintenance.
The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since March 2017.
The artifact includes a README, while the absence of tests and a changelog is normal for published packages. However, the README is only 30 characters long, providing very little consumer guidance.
The repository name does not match the package name, and its README does not mention the package. That weakens confidence that the linked source repository actually represents this release.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is not decisive for a small package, but these counts provide no supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.