The package has a clear license, a readable artifact, and no install-time scripts. Its four-release history and minimal repository provide limited evidence of ongoing support.
62%
Total Score
79
83
There were no releases in the last 12 months, and the latest release was published on October 10, 2024. This indicates limited recent maintenance evidence, though the package is not abandoned by registry status.
The repository has 0 stars and 0 forks, with 1 watcher, providing little independent evidence of adoption or community support. Popularity is supporting evidence rather than decisive on its own.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest hygiene gap for a small package.
The linked repository has no security policy, reducing transparency for reporting and handling security issues. This is a maintenance and process gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
booosta/base Version ^4.0 | — | — |
components/jquery Version ^3.6 | — | — |
components/jqueryui Version ^1.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.