Unfit to use: the package is deprecated and its source repository is archived. Its last release was in October 2016, so it has no current maintenance path despite having tests, a README, and a clear MIT license.
15%
Total Score
100
100
50
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the release is no longer presented as maintained.
The package has only three releases and none in the last 12 months; its latest release was in October 2016. The early release spacing shows initial activity, but there is no evidence of ongoing maintenance.
The linked repository is archived and was last pushed in October 2016, indicating that active development has stopped. The repository does match the package context through its README mention, but that does not offset abandonment.
Version 0.1.2 is not a stable major release, which adds compatibility uncertainty for consumers. It is not marked as a prerelease, so this is a secondary concern rather than the main risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kunstmaan/bundles-cms Version ~3.6.0 | — | — |
willdurand/negotiation Version ~2.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.