62%
Total Score
caution
Usable with caveats: the latest registry release is nearly six years old.
The package has seven runtime dependencies, including several frontend assets and related packages. This is a meaningful dependency surface for a framework integration, though no specific dependency failure is shown.
The artifact includes a README and has a GitHub release for this version, which helps consumers understand and trace the package. No tests are shown in the package or repository, and the README is brief, limiting transparency.
Only two releases exist, with none in the last 12 months; the latest registry release was published nearly six years ago. This materially raises maintenance and compatibility risk.
There were no commits or active maintainers in the three months measured. This indicates limited recent development, although the repository's March 2025 push provides some compensating evidence.
The repository uses Composer for builds, but no security scanning tools are configured. Build tooling is present, while automated security coverage is absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
npm-asset/vue Version ^2.6 | — | — |
ethercap/common Version @dev | — | — |
npm-asset/ledap Version ^0.1.8 | — | — |
npm-asset/bootstrap Version 4.4.1 | — | — |
ethercap/yii2-api-base Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.