Usable with caveats: this is a small, clearly identified static theme package with a README, stable release, and minimal dependencies, but it has had no release or repository activity for over 13 years. Depend on it only if its legacy Bootstrap version and unchanging maintenance model fit your project.
58%
Total Score
75
100
78
90
The package has only one release, published over 13 years ago, with no releases in the last 12 months. Its narrow, static-theme purpose can explain infrequent releases, but the age provides little evidence of ongoing maintenance.
There have been no commits and no active maintainers in the last three months, consistent with a repository that has been inactive for over 13 years. The static package scope limits the impact, but does not remove abandonment risk.
The repository has only 3 stars and 6 forks, so there is limited community evidence supporting its continued use. Low popularity is supporting evidence rather than a severe concern for a narrow theme package.
Composer build tooling is present, but no security scanning tools are configured. For a small static asset repository this is a modest transparency gap rather than a severe risk.
The repository is not marked archived, but it was last pushed over 13 years ago. The non-archived status is reassuring administratively, while the long inactivity remains a maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
components/bootstrap Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.