It has a declared license, a matching source repository, and no install-time scripts. The empty README and lack of security scanning reduce transparency, while organizational backing and an unarchived repository provide limited reassurance.
38%
Total Score
50
64
75
The latest release was published in May 2015, more than 11 years ago, with no releases in the last 12 months. This strongly raises abandonment risk despite a previously active early cadence.
The repository has recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release pause. This is strong evidence that maintenance has stopped.
The package includes a README entry, but it is empty; tests and a changelog are absent, which is normal for published artifacts and therefore not a gap by itself. The empty consumer documentation still weakens transparency.
There has been no issue or pull request activity in the last month. With no recent commits or releases, the lack of project activity adds to the maintenance concern.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence only, but it does not compensate for the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bread/media Version ~0.1 | — | — |
bread/types Version ~0.1 | — | — |
bread/helpers Version ~0.1 | — | — |
bread/configuration Version ~1.2 | — | — |
zetacomponents/base Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.