The repository includes tests and the package has a clear MIT declaration, but development has stopped for about nine months and the package has only two releases. The repository name does not match the package name, and it does not mention the package in its README.
58%
Total Score
50
100
71
50
One registry maintainer is consistent with a user-owned project, but it leaves the package dependent on a single publisher.
The package and repository are both owned by the same individual, so the source relationship is consistent, but there is no organizational backing to compensate for the single-maintainer model.
Only two releases exist, both issued about 567 days ago, with no releases in the last 12 months. This indicates limited maturity and a meaningful abandonment concern.
There were no commits and no active maintainers in the last three months, supporting the concern that development has stalled.
The repository name does not match the package name, and the README does not mention the package. That weakens confidence that the linked repository is the intended source.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version v3.11.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.