Stable versioning, a small dependency set, organization ownership, and a clear license support basic adoption. The package is cleanly packaged and has no install-time scripts, but its documentation is minimal and the license texts do not fully align.
43%
Total Score
50
100
67
83
The package has 9 releases, but none in the last 12 months and the latest was published in February 2016—more than 10 years ago—showing prolonged abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history's long maintenance gap.
A license file is present, but the manifest declares GPL-3.0+ while the artifact identifies GPL-3.0 and MIT, leaving a meaningful licensing mismatch to resolve.
There are no open issues or pull requests, but with no recent commits this is better read as inactivity than evidence of active resolution.
The linked repository name does not match the package and its README does not mention the package, so package ownership and source correspondence are less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
claroline/core-bundle Version ~6.0 | — | — |
claroline/message-bundle Version ~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.