The stable 1.0.1 release and organization-backed repository are positives, but consumer documentation is absent. The package has seen no release since 2015 and no repository push since January 2016, so maintenance risk is substantial.
38%
Total Score
100
63
83
The package has had only two releases, both in September 2015, with no releases in the last 12 months. This long release gap is strong evidence of abandonment risk.
The published library contains no README, making integration harder for consumers. Missing tests and changelog are not concerns here because they normally belong in the source repository rather than the package artifact.
The repository name does not exactly match the package name, and the README mention could not be confirmed. The matching package file tree and organization backing partly reduce the concern, but package ownership is less transparent.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or maintainer community.
The repository is not archived, which is a modest positive, but its last push was in January 2016. The lack of recent source activity still points to stalled maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deltaphp/deltadb Version ~1.0 | — | — |
deltaphp/deltacore Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.