The matching repository and MIT declaration provide basic transparency, and the dependency set is small. Its tiny README, absent tests, and lack of security policy limit confidence in ongoing maintenance.
40%
Total Score
50
100
72
75
The latest release was published in May 2018, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk despite a previously regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since May 2018.
A README is present and the package has a GitHub release for this version, but the README is only 12 characters and no tests or changelog are present. The missing tests and changelog are normal for a published artifact, while the extremely limited README weakens consumer transparency.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no community-maintenance cushion for the long inactivity.
Composer build tooling is present, but no security-scanning tool was detected. For this small package that is a minor hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
linecorp/line-bot-sdk Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.