The package has a clear MIT license, a stable version, and no install-time scripts. Its small dependency footprint helps, but the limited project evidence leaves little support for future maintenance.
38%
Total Score
0
100
75
75
Only two releases were published, both in July 2015, with no release in roughly 11 years. This is strong evidence of abandonment risk, although the repository is not archived.
There were no commits and no active maintainers during the last three months. Combined with the release history, this indicates that maintenance has effectively stopped.
The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. Missing tests and changelog are normal for published artifacts, but the absent README reduces consumer transparency for a library.
Composer is used for builds, but no security-scanning tooling is present. This is a hygiene gap, not a severe risk by itself, especially for this very small and old repository.
The repository has no security policy. That weakens disclosure transparency, although the absence is a secondary concern compared with the lack of maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
corneltek/fileutil Version ~1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.