The release is stable and documented, with tests and release notes, but its source repository shows no commits in the last three months and no security policy. Workflow hygiene is also weak because all 11 action references are unpinned.
15%
Total Score
50
58
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption and maintenance risk for a new dependency.
The repository recorded zero commits and zero active maintainers in the last three months. This provides direct evidence that current maintenance capacity is absent.
The linked repository is archived, although it was last pushed on September 8, 2023. Archiving strongly indicates the project is no longer an active maintenance target.
The package has 17 releases since June 2016, but none in the last 12 months and its latest release was on November 30, 2021. The long release gap supports abandonment concerns.
The repository has no security policy. For an archived package this leaves vulnerability reporting and disclosure expectations unclear, reinforcing the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dmk/mkmailer Version ~3.0 || ^9.0 | — | — |
typo3/cms-core Version ^7.6 || ^8.7 || ^9.5 | — | — |
digedag/rn-base Version >=1.10 <= 1.13.99 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.