The package is small and clearly documented for its intended command, with no install-time scripts or deprecation notice. Its long inactivity, missing license, and repository mismatch make long-term support and provenance uncertain.
38%
Total Score
50
69
83
No declared license, license file, or repository license file was detected. That creates a material legal and transparency concern for adoption.
The latest release was on December 5, 2022, and there have been no releases in the last 12 months despite the package being about 4 years old. This is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the last 3 months, consistent with the last repository push occurring in December 2022. This materially increases abandonment risk.
The repository name does not match the package name and its README does not mention the package. Because the mismatch is not explained by the available evidence, the repository may not clearly establish package provenance.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no external adoption or maintenance signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.4 | — | — |
dev1437/model-parser Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.