The stable major version, MIT declaration, and lack of install-time scripts reduce adoption concerns. The source repository is not archived and matches the package, but its missing README and security policy make integration and ongoing review harder.
58%
Total Score
100
100
67
83
The package has had no releases in the last 12 months, and its latest release was on July 24, 2023—more than three years ago at collection time. Fourteen releases over its earlier history show prior activity but do not offset the prolonged pause.
The package has no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but a README is a meaningful gap for a library that consumers must integrate.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly reduces external validation without independently indicating abandonment.
Composer is used for builds, but no security-scanning tooling is reported. The build setup is appropriate, while the missing scanning is a minor transparency gap.
The linked repository is not archived, but its last push was on July 24, 2023, consistent with the stale release history. The non-archived state still leaves the project technically maintainable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
esas/cmsgate-core Version ~v2.2.7 | — | — |
esas/cmsgate-bridge-lib Version ~v2.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.