The package is clearly licensed and backed by an organization, with release notes for this version and a small dependency surface. Its maintenance record is the main concern: no releases or repository commits have appeared since April 2022.
58%
Total Score
83
100
93
50
The latest release was over four years ago, with no releases in the last 12 months; this materially raises abandonment and compatibility risk.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap and weakening evidence of active maintenance.
The repository has no security policy, which is a modest transparency gap, although this is less significant than the maintenance inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^5.3 || ^7.0 || ^8.0 | — | — |
carbon/eel Version ^1.2 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.