The package has a small dependency surface, no install-time scripts, and organization backing. Its minimal README, absent security policy, and repository mismatch provide little guidance or assurance for adoption.
38%
Total Score
50
100
69
83
The latest release was published more than 10 years ago, with no releases in the last 12 months; this is strong evidence of abandonment risk despite the package having a stable release history.
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating no recent maintenance capacity. The repository is not archived, but that does not offset the lack of activity.
The package includes a README, but it is only 33 characters and says “TODO: add config.yml description.” Tests and changelog files are not expected in a published artifact, while the sparse consumer documentation is a genuine transparency gap.
The repository name does not match the package name and the README does not mention the package, so the package-to-repository relationship is less transparent. Organization backing partly offsets this concern, but does not remove it.
The repository has zero stars and zero forks, with three watchers. Popularity is only supporting evidence, but these low adoption indicators provide no compensating signal for the maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
claroline/core-bundle Version ~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.