The license metadata conflicts with the license text, and the source repository does not clearly identify this package. Its tiny README and lack of tests limit transparency, while the project has had no releases or commits for over five years.
38%
Total Score
0
40
50
The latest release was on February 24, 2021, with no releases in the last 12 months; this indicates a project that has been inactive for over five years. The earlier median interval of about 14 days shows it was once released regularly, but does not offset the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that maintenance has stopped rather than merely slowed.
The manifest declares MIT, while the artifact license file is detected as Apache-2.0, creating a material licensing ambiguity despite a license file being present.
The artifact contains 44 files, but the linked repository exposes only three files, including the README and composer manifest. That large discrepancy weakens confidence that the repository provides the source needed to understand or maintain this release.
The package has a README, but it is only 18 characters long and supplies little integration guidance for an API package. Missing tests and changelog files are normal for a published artifact and are not counted against it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
didrive/f Version >=1.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.