The dependency footprint is small and the registry shows no deprecation. Source and ongoing maintenance are difficult to verify, so adopting it carries a long-term support risk.
48%
Total Score
100
50
The package has had no release in over two years, despite seven releases since October 2020. That extended gap raises abandonment and support concerns.
Version 0.7 is not a stable major release, which suggests the public API may still change. It is not marked as a prerelease, partially reducing that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bnnvara/messenger-bundle Version ^3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.