Usable with caveats: it has a long release history, a matching organization-backed repository, tests, release notes, and clear licensing. However, there have been no releases in 21 months and no commits in the last 3 months, so ongoing maintenance appears limited.
68%
Total Score
67
100
88
80
The package has existed for over 12 years with 24 releases, but it has had no release in the last 12 months; the latest release was about 21 months ago. This suggests slowing maintenance despite the established history.
There were zero commits and zero active maintainers in the last 3 months. Combined with the long gap since the latest release, this is evidence of limited current maintenance.
There is only one open issue and three open pull requests, with no new or merged pull requests in the last month. This indicates low current activity, though it is not by itself evidence of abandonment.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe risk for this small library.
No repository security policy was found. This limits vulnerability-reporting transparency, but it is a secondary concern for an established small library with other project documentation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
data-values/common Version ~1.0|~0.4.0|~0.3.0 | — | — |
data-values/interfaces Version ~1.0|~0.2.0 | — | — |
data-values/data-values Version ~3.0|~2.0|~1.0|~0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.