The repository has had no commits for about 10 years and has no active issue or pull-request work. The small, individually maintained project has no tests, changelog, security policy, or security scanning, increasing maintenance uncertainty.
42%
Total Score
25
69
83
The package has had only two releases, both around 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment, although the package is not deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was about 10 years ago. No provided signal shows compensating recent maintenance.
The package includes a usable README and its lack of tests or changelog is normal for a published asset bundle. However, the source repository also has no tests or changelog, reducing transparency for future maintenance.
There is no current issue or pull-request activity, consistent with a project that is no longer actively maintained. The absence of open issues alone is not a problem, but here it does not offset the lack of commits and releases.
The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or backup support. Popularity is supporting evidence rather than a verdict, so this remains a caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version 2.0.* | — | — |
bower-asset/jquery Version 2.2.*@stable | 2.1.*@stable | 1.11.*@stable | 1.12.*@stable | — | — |
bower-asset/pagepiling.js Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.