The license is explicit, dependencies are minimal, and installation has no lifecycle scripts. Its maintenance and long-term support are uncertain for a production dependency.
38%
Total Score
0
100
60
75
The package has had only two releases, with the latest published about 10 years ago and none in the last 12 months. This is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last 3 months. Given the package's age and lack of recent releases, this supports a serious maintenance concern.
The repository is not archived, which is a compensating signal against the package being formally abandoned. However, its last push was about 9 years ago, so this does not offset the stale release history.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency and support gap for a dependency.
The latest version is still a beta, and all recent releases are prereleases. After about 10 years without a stable release, this materially weakens maturity confidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
campaignchain/channel-citrix Version 1.0.0-beta.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.