The package includes a license, documentation, tests in the repository, and release notes, but its maintenance outlook is poor. Treat this release as unsuitable for a new dependency unless you are prepared to maintain or replace it.
12%
Total Score
0
57
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
This package has only one release, published about 3 years and 9 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.
The repository had no commits and no active maintainers in the last 3 months, consistent with the archived and abandoned status.
The linked repository is archived and was last pushed in November 2023, so it is no longer an actively maintained source.
The package runs post-install and post-update scripts. These deserve review because they execute during dependency operations, although this signal alone does not establish a health failure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/flow Version ~8.1.0 || ~8.2.0 | — | — |
google/cloud-secret-manager Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.