The small codebase includes repository tests and a clear MIT declaration. Its organization backing and modest dependency footprint help, but the package and repository have seen no activity since May 2020, making abandonment a serious concern.
43%
Total Score
83
100
72
75
The latest release was in May 2020, with zero releases in the last 12 months after more than six years of package age. This is strong evidence of abandonment risk, with no newer release activity to compensate.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While a quiet issue tracker can be healthy, here it reinforces the stale release history rather than showing active maintenance.
The repository has zero stars and forks and only three watchers. Popularity is not decisive for a small package, but these figures provide little supporting evidence of community adoption or oversight.
The repository uses Composer for builds, which fits the package ecosystem. No security scanning tooling is present, a minor hygiene gap that matters less than the clear inactivity signal.
The repository is not archived, which preserves a path for maintenance, but its last push was in May 2020. The repository's continued availability does not offset the long period without updates.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mouyong/foundation-sdk Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.