The package has a clear README, an MIT declaration, and a repository that matches the package. Its very small user base, missing security policy, and lack of automated security scanning provide little additional assurance for an old dependency.
40%
Total Score
33
72
83
The latest release was published nearly 10 years ago, with no releases in the last 12 months and only five releases overall. This is strong evidence of abandonment despite the package not being registry-deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last release being nearly 10 years ago, this indicates a severe abandonment risk.
The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it provides no organizational backing to compensate for the inactive history.
There is one open issue, but no issues or pull requests were opened or closed in the last month. This supports the broader picture of a project that is not actively maintained.
The repository has only 3 stars, 1 fork, and 2 watchers. Low popularity is supporting evidence rather than a verdict, but it suggests limited community visibility and backup.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zelenin/elo Version dev-master | — | — |
ryanhs/chess.php Version 1.0.2 | — | — |
chris-moreton/tournament-utils Version 1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.