The package includes tests, a substantial README, and a matching MIT license, which make the existing code easier to evaluate. Its lack of security scanning and single publisher add modest maintenance concerns.
38%
Total Score
0
100
75
50
The latest release was published nearly 10 years ago, with no releases in the last 12 months. Six releases arrived early in the project’s life, but the long subsequent gap is strong abandonment evidence.
The repository recorded no commits and no active maintainers in the last 3 months, and its last push was in December 2016. This confirms that the release-history gap reflects inactive development rather than registry-only publishing.
The repository has no stars or forks and only one watcher. Low popularity is not decisive for a small package, but it provides little additional evidence of community support alongside the inactivity.
Composer build tooling is present, but no security-scanning tooling was detected. This is a hygiene gap rather than a standalone dependency blocker.
The repository has no security policy, leaving no documented reporting or response process. For an inactive package this modestly increases maintenance uncertainty.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chilimatic/interfaces-component Version 2.* | — | — |
chilimatic/datastructure-component Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.