The repository contains tests and the release has a GitHub release, which help with verification. Its MIT declaration and lack of install-time scripts are also positive, but the project appears abandoned and has little community or security support.
42%
Total Score
0
69
75
The latest release was nearly seven years ago, with no releases in the last 12 months. The earlier median interval of about 56 days shows the project was once active, but does not offset the prolonged silence.
There were no commits and no active maintainers in the last three months, consistent with the release history showing nearly seven years without a new release. This materially raises abandonment risk.
The repository has zero stars and watchers and only one fork. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of community oversight.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools were found. The missing scanning is a modest transparency and maintenance gap.
The repository has no security policy. For a package handling request validation, this leaves vulnerability reporting and maintenance expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
endeavors/maxmd-http Version 0.3.* | — | — |
endeavors/support-vo Version ^2.0 | — | — |
endeavors/maxmd-apiauth Version 0.1.* | — | — |
endeavors/maxmd-support Version ~1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.