Consumer documentation and verification are limited, with no README or tests. The organization-backed repository is correctly linked and not archived, but the project shows little evidence of current maintenance.
35%
Total Score
75
50
61
83
The package has only one release, published about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the stable version.
The repository is not archived, but its last push was about 11 years ago. That stale activity materially raises abandonment risk even without formal archival.
The package declares only two runtime dependencies and no development dependencies, keeping the dependency surface small, though the absence of development tooling limits verification evidence.
The artifact has no README, tests, or changelog, leaving consumers with little documentation or verification evidence. Missing tests and changelog are normal packaging gaps, but the missing README matters for a library.
There are no open issues or pull requests and no recent activity. While this avoids an unresolved backlog, it also offers no evidence of current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deltaphp/deltacore Version ~1.0 | — | — |
orbisnull/orbisconvert Version ~0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.